last executing test programs: 5.61243198s ago: executing program 0 (id=1567): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 5.27497755s ago: executing program 0 (id=1572): r0 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000240)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1, &(0x7f00000004c0)=""/20, 0x14}, 0x41) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x83}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 5.076578307s ago: executing program 0 (id=1576): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800714c78bc0000000000000000000094000100010000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x19) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 4.520005474s ago: executing program 0 (id=1580): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) 4.272628913s ago: executing program 0 (id=1585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 3.937994344s ago: executing program 0 (id=1586): r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0xfffffffffffffffd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0x2, '\x00', r5, 0xffffffffffffffff, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair(0x8, 0xa, 0x10, &(0x7f0000000300)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x324) ioctl$TUNSETTXFILTER(r9, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33f2ff8689b3f20e"]) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000b0007010000f8ffffffbfa4007d580dfe76c841b9000000000007040000f0ffffffb7020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_int(r14, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r15, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x9) syz_clone(0x40802000, 0x0, 0x61, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x8, 0x0, &(0x7f0000000a00), &(0x7f0000000a40)='syzkaller\x00', 0x4, 0xb5, &(0x7f0000000b40)=""/181, 0x41000, 0x20, '\x00', r5, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r13, 0x0, 0x0, 0x0, 0x10, 0x2f}, 0x94) openat$cgroup_freezer_state(r14, &(0x7f00000001c0), 0x2, 0x0) 2.294074926s ago: executing program 2 (id=1597): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c, 0x0, 0x0, 0xf100}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.123027511s ago: executing program 2 (id=1599): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0xfe, 0xfffffffffffffffc}, 0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, 0x0, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x4) openat$cgroup_int(r0, &(0x7f00000003c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.936671417s ago: executing program 3 (id=1600): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x15, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r0, 0xffffffffffffffff, 0x6, 0x2000, 0x0, @value=r2, @void, @void, @void, r1}, 0x20) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5761, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8902, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f001000000000000000000075ac864873cfc1e10ebb04000000964756cb6b905d0ab8c27df4ebeb0e04e2defc634b339ad9e096b2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.930137618s ago: executing program 2 (id=1601): socketpair(0x22, 0x3, 0x5, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c35fe800000000080fedc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 1.438910113s ago: executing program 2 (id=1605): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x15, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r0, 0xffffffffffffffff, 0x6, 0x2000, 0x0, @value=r2, @void, @void, @void, r1}, 0x20) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5761, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8902, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f001000000000000000000075ac864873cfc1e10ebb04000000964756cb6b905d0ab8c27df4ebeb0e04e2defc634b339ad9e096b2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.437842043s ago: executing program 3 (id=1607): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001040), 0x12) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=r7, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) 1.174617682s ago: executing program 1 (id=1608): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {0x85, 0x0, 0x300}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xed, &(0x7f0000000c00)=""/237, 0x41000, 0x3}, 0x94) 885.131091ms ago: executing program 1 (id=1609): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000180000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 834.367273ms ago: executing program 2 (id=1610): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="89000000120081ae08060cdc030ec0007f03e3f700000000001f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e7d4ba3a0093b837dc6cc01e32efaec8c7a6ec081207000000080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538a7fff4f2cbbe8d5e6dde60978c05a90ed65a6", 0x89}], 0x1}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x83508, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xec1, 0x200, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x800, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8941, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd87, 0x0, 0x0, 0x0, 0xf0000000}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)="89000000120081ae08060cdc030ec0007f03e3f700000000001f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e7d4ba3a0093b837dc6cc01e32efaec8c7a6ec081207000000080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538a7fff4f2cbbe8d5e6dde60978c05a90ed65a6", 0x89}], 0x1}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x83508, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xec1, 0x200, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x800, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) (async) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8941, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd87, 0x0, 0x0, 0x0, 0xf0000000}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) 764.184725ms ago: executing program 1 (id=1611): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg(r1, 0x0, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd2b1, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca300000000fffe2403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) recvmsg$unix(r0, &(0x7f00000040c0)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000000500)=""/2, 0x2}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/113, 0x71}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/247, 0xf7}, {&(0x7f0000003f00)=""/181, 0xb5}], 0x7, &(0x7f0000004040)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x10002) 641.428169ms ago: executing program 3 (id=1612): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x20000884) 616.02626ms ago: executing program 1 (id=1613): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 507.111823ms ago: executing program 3 (id=1614): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x99, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x9, 0x7, 0x2, 0x44200, r0, 0xc717, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40000000, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 383.285728ms ago: executing program 1 (id=1615): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x15, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r0, 0xffffffffffffffff, 0x6, 0x2000, 0x0, @value=r2, @void, @void, @void, r1}, 0x20) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x5761, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8902, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f001000000000000000000075ac864873cfc1e10ebb04000000964756cb6b905d0ab8c27df4ebeb0e04e2defc634b339ad9e096b2", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 241.246862ms ago: executing program 3 (id=1616): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 230.301712ms ago: executing program 2 (id=1617): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="d8000000100081044e81f782db44b904021d08390b000000004100a1260015000600142603600e1209002100ff000401a80016000400144006000300036010faf9d113fe5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f877573bda0b18f92590d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086de373d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4ed", 0xd8}], 0x1}, 0x4004084) 73.645177ms ago: executing program 3 (id=1618): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x0, 0xb405}, {0x18, 0x29, 0xb, '\x00'}], 0x28}, 0x0) 0s ago: executing program 1 (id=1619): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x12, &(0x7f0000000d80)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x3, 0x7, 0xa, 0x4, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000e40)='GPL\x00', 0x7fffffff, 0x9a, &(0x7f0000000e80)=""/154, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x0, 0xc, 0x8, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001100)=[r1, r5, r5, r2], 0x0, 0x10, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000740)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000008c0)='syzkaller\x00', 0x8000, 0xff, &(0x7f0000000a00)=""/255, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xb, 0x1a61, 0x3}, 0x10, 0x1ddba, r8, 0x9, &(0x7f0000000bc0)=[r2, 0xffffffffffffffff, r0, r9, r1], &(0x7f0000000c00)=[{0x3, 0x1, 0xf, 0x8}, {0x2, 0x3, 0x1, 0x5}, {0x1, 0x4, 0x8, 0xb}, {0x1, 0x2, 0x4, 0x6}, {0x0, 0x2, 0x1}, {0x1, 0x3, 0x0, 0x3}, {0x3, 0x4, 0x5, 0xa}, {0x2, 0x2, 0x3, 0x9}, {0x4, 0x1, 0x4, 0x3}], 0x10, 0xff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r7}, &(0x7f00000003c0), &(0x7f0000000600)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x8001}, 0x100401, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x5) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r13 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r13, &(0x7f00000001c0)={'geneve0', 0x32, 0x30}, 0xa) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 76.165470][ T5763] cgroup: Unknown subsys name 'net' [ 76.299482][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.943738][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.024234][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.024814][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.041543][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.049348][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.057154][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.066376][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.073256][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.074075][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.083047][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.090184][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.095912][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.101953][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.109631][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.119138][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.123498][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.131839][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.141891][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.151906][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.160477][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.169428][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.176976][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.204636][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.224642][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.241511][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.656520][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.669919][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.783776][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 80.803183][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.853731][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.861579][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.869195][ T5774] bridge_slave_0: entered allmulticast mode [ 80.876531][ T5774] bridge_slave_0: entered promiscuous mode [ 80.918691][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.926093][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.933786][ T5774] bridge_slave_1: entered allmulticast mode [ 80.941013][ T5774] bridge_slave_1: entered promiscuous mode [ 80.967514][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.974912][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.982459][ T5776] bridge_slave_0: entered allmulticast mode [ 80.989415][ T5776] bridge_slave_0: entered promiscuous mode [ 81.017468][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.024730][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.032216][ T5776] bridge_slave_1: entered allmulticast mode [ 81.039062][ T5776] bridge_slave_1: entered promiscuous mode [ 81.094873][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.107856][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.156171][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.165824][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.174008][ T5775] bridge_slave_0: entered allmulticast mode [ 81.183475][ T5775] bridge_slave_0: entered promiscuous mode [ 81.204122][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.223095][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.230249][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.238345][ T5775] bridge_slave_1: entered allmulticast mode [ 81.246244][ T5775] bridge_slave_1: entered promiscuous mode [ 81.253077][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.260205][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.267976][ T5778] bridge_slave_0: entered allmulticast mode [ 81.275000][ T5778] bridge_slave_0: entered promiscuous mode [ 81.284455][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.306283][ T5774] team0: Port device team_slave_0 added [ 81.331095][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.338227][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.346533][ T5778] bridge_slave_1: entered allmulticast mode [ 81.353596][ T5778] bridge_slave_1: entered promiscuous mode [ 81.386852][ T5774] team0: Port device team_slave_1 added [ 81.398067][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.410408][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.425784][ T5776] team0: Port device team_slave_0 added [ 81.434166][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.464726][ T5776] team0: Port device team_slave_1 added [ 81.473498][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.494819][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.504236][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.530558][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.561055][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.568091][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.594415][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.633062][ T5775] team0: Port device team_slave_0 added [ 81.639785][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.647463][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.673789][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.708373][ T5775] team0: Port device team_slave_1 added [ 81.715475][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.725230][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.751470][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.782063][ T5778] team0: Port device team_slave_0 added [ 81.811943][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.819138][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.845349][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.867356][ T5778] team0: Port device team_slave_1 added [ 81.877218][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.884256][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.911294][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.927148][ T5774] hsr_slave_0: entered promiscuous mode [ 81.934411][ T5774] hsr_slave_1: entered promiscuous mode [ 81.970191][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.977312][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.003644][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.045903][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.053211][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.079230][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.109163][ T5776] hsr_slave_0: entered promiscuous mode [ 82.115816][ T5776] hsr_slave_1: entered promiscuous mode [ 82.124830][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.132651][ T5776] Cannot create hsr debugfs directory [ 82.189838][ T5775] hsr_slave_0: entered promiscuous mode [ 82.195973][ T5785] Bluetooth: hci0: command tx timeout [ 82.201651][ T5788] Bluetooth: hci1: command tx timeout [ 82.207698][ T5775] hsr_slave_1: entered promiscuous mode [ 82.214509][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.222277][ T5775] Cannot create hsr debugfs directory [ 82.271188][ T5785] Bluetooth: hci2: command tx timeout [ 82.274011][ T5778] hsr_slave_0: entered promiscuous mode [ 82.285239][ T5778] hsr_slave_1: entered promiscuous mode [ 82.291730][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.299326][ T5778] Cannot create hsr debugfs directory [ 82.350965][ T5785] Bluetooth: hci3: command tx timeout [ 82.694370][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.705561][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.716128][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.728519][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.798909][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.809803][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.827703][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.853571][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.934357][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.962386][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.984343][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.027748][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.076376][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.087775][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.098790][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.109965][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.136446][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.206387][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.246418][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.253768][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.284361][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.291591][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.320072][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.356910][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.379569][ T2883] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.386789][ T2883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.420644][ T2883] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.427869][ T2883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.497706][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.520306][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.541623][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.582266][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.589411][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.625011][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.639990][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.647264][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.706867][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.714130][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.724883][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.732101][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.082892][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.246190][ T5774] veth0_vlan: entered promiscuous mode [ 84.268119][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.275310][ T5785] Bluetooth: hci1: command tx timeout [ 84.282098][ T5785] Bluetooth: hci0: command tx timeout [ 84.306332][ T5774] veth1_vlan: entered promiscuous mode [ 84.351257][ T5785] Bluetooth: hci2: command tx timeout [ 84.400642][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.431597][ T5785] Bluetooth: hci3: command tx timeout [ 84.440336][ T5774] veth0_macvtap: entered promiscuous mode [ 84.450613][ T5776] veth0_vlan: entered promiscuous mode [ 84.473341][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.493358][ T5776] veth1_vlan: entered promiscuous mode [ 84.514895][ T5774] veth1_macvtap: entered promiscuous mode [ 84.555042][ T5778] veth0_vlan: entered promiscuous mode [ 84.574875][ T5778] veth1_vlan: entered promiscuous mode [ 84.593387][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.620442][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.660423][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.669910][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.679730][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.690346][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.710938][ T5776] veth0_macvtap: entered promiscuous mode [ 84.721479][ T5776] veth1_macvtap: entered promiscuous mode [ 84.749657][ T5778] veth0_macvtap: entered promiscuous mode [ 84.774998][ T5775] veth0_vlan: entered promiscuous mode [ 84.787950][ T5778] veth1_macvtap: entered promiscuous mode [ 84.810481][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.823213][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.835666][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.858506][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.869546][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.881463][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.923364][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.934495][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.946299][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.956841][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.968599][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.986567][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997511][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.006728][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.017415][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.029051][ T5775] veth1_vlan: entered promiscuous mode [ 85.065903][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.076862][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.088081][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.101147][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.116252][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.139407][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.157426][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.162598][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.165620][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.181655][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.181687][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.288748][ T5775] veth0_macvtap: entered promiscuous mode [ 85.313590][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.322731][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.324595][ T5775] veth1_macvtap: entered promiscuous mode [ 85.399004][ T2883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.424955][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.436692][ T2883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.446714][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.456642][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.467115][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.477439][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.488173][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.500518][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.537979][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.549032][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.560239][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.570746][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.584074][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.599479][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.614696][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.643737][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.659554][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.668339][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.676847][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.688811][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698873][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.710948][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.719708][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.792633][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.813648][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.989636][ T5844] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.062075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.094919][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.119777][ T5848] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.318225][ T2883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.326874][ T5851] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5'. [ 86.354431][ T2883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.363102][ T5785] Bluetooth: hci0: command tx timeout [ 86.367839][ T5788] Bluetooth: hci1: command tx timeout [ 86.381904][ C0] hrtimer: interrupt took 78546 ns [ 86.454444][ T5788] Bluetooth: hci2: command tx timeout [ 86.514224][ T5788] Bluetooth: hci3: command tx timeout [ 86.589038][ T5854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.639587][ T5852] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5'. [ 87.108988][ T5862] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.302024][ T5864] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7'. [ 87.353630][ T5864] netlink: 'syz.1.7': attribute type 28 has an invalid length. [ 87.375579][ T5864] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 87.407912][ T5864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7'. [ 88.439256][ T5788] Bluetooth: hci1: command tx timeout [ 88.439287][ T5785] Bluetooth: hci0: command tx timeout [ 88.513582][ T5785] Bluetooth: hci2: command tx timeout [ 88.591044][ T5785] Bluetooth: hci3: command tx timeout [ 89.388949][ T5887] syzkaller0: entered promiscuous mode [ 89.395106][ T5887] syzkaller0: entered allmulticast mode [ 89.887801][ T5894] netlink: 'syz.2.19': attribute type 28 has an invalid length. [ 90.564231][ T5894] netlink: 'syz.2.19': attribute type 29 has an invalid length. [ 90.632751][ T5894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19'. [ 94.613960][ T1199] cfg80211: failed to load regulatory.db [ 94.859892][ T5907] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.22'. [ 96.175101][ T5893] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19'. [ 96.260874][ T5910] netlink: 14 bytes leftover after parsing attributes in process `syz.2.23'. [ 96.500495][ T5914] netlink: 152 bytes leftover after parsing attributes in process `syz.2.23'. [ 96.574349][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 96.764862][ T5913] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 96.957115][ T5913] team0: Device hsr_slave_0 failed to register rx_handler [ 97.161761][ T5924] netlink: 152 bytes leftover after parsing attributes in process `syz.3.26'. [ 97.268564][ T5913] syz.0.24 (5913) used greatest stack depth: 19432 bytes left [ 97.689631][ T5938] netlink: 196 bytes leftover after parsing attributes in process `syz.1.30'. [ 98.180987][ T5946] netlink: 'syz.3.32': attribute type 28 has an invalid length. [ 98.188717][ T5946] netlink: 'syz.3.32': attribute type 29 has an invalid length. [ 98.208657][ T5946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.32'. [ 98.857170][ T5944] netlink: 156 bytes leftover after parsing attributes in process `syz.3.32'. [ 98.874884][ T5948] netlink: 14 bytes leftover after parsing attributes in process `syz.1.34'. [ 98.982655][ T5955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.34'. [ 99.523837][ T5967] netlink: 'syz.0.42': attribute type 21 has an invalid length. [ 100.495841][ T5997] netlink: 'syz.0.49': attribute type 28 has an invalid length. [ 100.515438][ T5997] netlink: 'syz.0.49': attribute type 29 has an invalid length. [ 100.550406][ T5997] __nla_validate_parse: 2 callbacks suppressed [ 100.550424][ T5997] netlink: 132 bytes leftover after parsing attributes in process `syz.0.49'. [ 101.200351][ T5995] netlink: 156 bytes leftover after parsing attributes in process `syz.0.49'. [ 101.438314][ T6002] netlink: 14 bytes leftover after parsing attributes in process `syz.3.52'. [ 101.688246][ T6013] netlink: 152 bytes leftover after parsing attributes in process `syz.3.52'. [ 102.013889][ T6010] syzkaller0: entered promiscuous mode [ 102.019454][ T6010] syzkaller0: entered allmulticast mode [ 106.569948][ T6053] Zero length message leads to an empty skb [ 106.599981][ T6053] : renamed from ip6gretap0 (while UP) [ 106.938788][ T6056] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.71'. [ 107.221750][ T6054] delete_channel: no stack [ 107.531372][ T6056] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 107.785586][ T6069] syzkaller0: entered promiscuous mode [ 107.836801][ T6069] syzkaller0: entered allmulticast mode [ 108.315650][ T6080] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 108.534671][ T6080] team0: Device wg1 is of different type [ 108.881790][ T6079] delete_channel: no stack [ 111.020398][ T6096] netlink: 'syz.2.84': attribute type 21 has an invalid length. [ 111.028483][ T6096] netlink: 128 bytes leftover after parsing attributes in process `syz.2.84'. [ 111.038238][ T6096] netlink: 'syz.2.84': attribute type 4 has an invalid length. [ 111.362264][ T6103] netlink: 'syz.2.94': attribute type 9 has an invalid length. [ 111.370629][ T6103] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.94'. [ 111.817484][ T6111] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 111.986941][ T6118] netlink: 152 bytes leftover after parsing attributes in process `syz.1.90'. [ 112.013983][ T6105] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.86'. [ 112.498527][ T6127] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 112.686105][ T6127] team0: Device wg1 is of different type [ 112.829572][ T6139] netlink: 'syz.1.98': attribute type 9 has an invalid length. [ 112.840528][ T6139] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.98'. [ 112.943863][ T6139] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 112.946034][ T6141] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.99'. [ 112.994743][ T6139] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 113.271719][ T6125] delete_channel: no stack [ 113.284056][ T6145] netlink: 'syz.0.101': attribute type 9 has an invalid length. [ 113.293933][ T6145] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.101'. [ 113.945859][ T6151] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 114.037135][ T6151] team0: Device hsr_slave_0 failed to register rx_handler [ 114.158784][ T6153] sit0: entered allmulticast mode [ 114.298037][ T6154] sit0: entered promiscuous mode [ 114.650227][ T6167] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 114.679106][ T6170] netlink: 'syz.0.111': attribute type 6 has an invalid length. [ 114.681839][ T6167] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.110'. [ 115.771488][ T6188] netlink: 'syz.1.117': attribute type 9 has an invalid length. [ 115.791082][ T6188] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.117'. [ 117.069365][ T6210] can: request_module (can-proto-5) failed. [ 117.520172][ T6226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.131'. [ 119.735544][ T6271] team0: Port device team_slave_0 removed [ 120.213597][ T6264] delete_channel: no stack [ 121.258997][ T6296] netlink: 152 bytes leftover after parsing attributes in process `syz.1.151'. [ 121.401514][ T6302] netlink: 'syz.2.153': attribute type 9 has an invalid length. [ 121.411416][ T6302] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.153'. [ 122.373476][ T6312] netlink: 'syz.3.156': attribute type 2 has an invalid length. [ 122.394700][ T6312] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.156'. [ 123.858222][ T6328] netlink: 'syz.2.163': attribute type 9 has an invalid length. [ 123.885925][ T6328] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.163'. [ 123.969587][ T6326] netlink: 196 bytes leftover after parsing attributes in process `syz.1.162'. [ 123.990150][ T6329] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 124.067670][ T6334] netlink: 'syz.0.164': attribute type 9 has an invalid length. [ 124.100028][ T6334] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.164'. [ 124.118464][ T6329] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.261917][ T6336] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 124.330856][ T6341] netlink: 'syz.0.164': attribute type 10 has an invalid length. [ 124.426638][ T6341] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.548939][ T6361] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.057931][ T6371] netlink: 'syz.3.174': attribute type 9 has an invalid length. [ 125.092019][ T6371] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.174'. [ 125.313886][ T6376] netlink: 'syz.0.176': attribute type 19 has an invalid length. [ 125.343309][ T6376] netlink: 13744 bytes leftover after parsing attributes in process `syz.0.176'. [ 125.584158][ T6382] netlink: 'syz.1.178': attribute type 2 has an invalid length. [ 125.595853][ T6382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.178'. [ 126.563266][ T6395] validate_nla: 1 callbacks suppressed [ 126.563417][ T6395] netlink: 'syz.1.184': attribute type 2 has an invalid length. [ 126.607665][ T6395] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.184'. [ 126.793579][ T6403] C: renamed from team_slave_0 [ 126.834056][ T6403] netlink: 'syz.3.187': attribute type 4 has an invalid length. [ 126.910868][ T6403] netlink: 116 bytes leftover after parsing attributes in process `syz.3.187'. [ 126.919900][ T6403] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 127.096582][ T6412] netlink: 'syz.1.191': attribute type 5 has an invalid length. [ 127.105570][ T6412] netlink: 176 bytes leftover after parsing attributes in process `syz.1.191'. [ 127.530338][ T6419] netlink: 196 bytes leftover after parsing attributes in process `syz.3.192'. [ 128.586152][ T6442] netlink: 'syz.1.201': attribute type 10 has an invalid length. [ 128.627658][ T6445] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 128.638492][ T6442] hsr_slave_0: left promiscuous mode [ 128.679479][ T6442] hsr_slave_1: left promiscuous mode [ 129.084120][ T6461] __nla_validate_parse: 2 callbacks suppressed [ 129.084136][ T6461] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.208'. [ 129.130196][ T6458] netlink: 196 bytes leftover after parsing attributes in process `syz.0.206'. [ 131.038452][ T6500] netlink: 'syz.3.224': attribute type 41 has an invalid length. [ 131.046978][ T6500] netlink: 'syz.3.224': attribute type 41 has an invalid length. [ 133.157273][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.165166][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.351395][ T5785] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 133.652177][ T6569] netlink: 'syz.0.248': attribute type 25 has an invalid length. [ 133.709539][ T6569] netlink: 'syz.0.248': attribute type 29 has an invalid length. [ 133.795475][ T6572] netlink: 'syz.2.250': attribute type 9 has an invalid length. [ 133.811944][ T6572] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.250'. [ 134.378406][ T6585] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 134.403393][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'. [ 134.478631][ T6585] batman_adv: batadv0: Adding interface: veth0_vlan [ 134.511723][ T6585] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.571500][ T6585] batman_adv: batadv0: Interface activated: veth0_vlan [ 134.862320][ T6598] netlink: 'syz.0.261': attribute type 21 has an invalid length. [ 134.910776][ T6598] netlink: 156 bytes leftover after parsing attributes in process `syz.0.261'. [ 135.673329][ T6621] netlink: 196 bytes leftover after parsing attributes in process `syz.1.270'. [ 136.162053][ T6631] netlink: 'syz.2.275': attribute type 9 has an invalid length. [ 136.173455][ T6631] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.275'. [ 136.337566][ T6637] Dead loop on virtual device ip6_vti0, fix it urgently! [ 136.369402][ T6633] syzkaller0: entered promiscuous mode [ 136.403850][ T6633] syzkaller0: entered allmulticast mode [ 136.459822][ T6634] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 136.481841][ T6631] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 138.550781][ T6654] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 138.578034][ T6654] team0: Device hsr_slave_0 failed to register rx_handler [ 138.754496][ T6659] IPv6: pim6reg1: Disabled Multicast RS [ 138.845585][ T6661] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 138.869479][ T6661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.284'. [ 138.935316][ T6661] batman_adv: batadv0: Adding interface: veth0_vlan [ 138.956407][ T6661] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.013742][ T6661] batman_adv: batadv0: Interface activated: veth0_vlan [ 140.561559][ T6700] can: request_module (can-proto-5) failed. [ 140.716841][ T6704] can: request_module (can-proto-5) failed. [ 142.267954][ T6745] netlink: 'syz.1.317': attribute type 10 has an invalid length. [ 142.290860][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.1.317'. [ 142.380601][ T6745] batman_adv: batadv0: Adding interface: veth0_vlan [ 142.397394][ T6745] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.464283][ T6745] batman_adv: batadv0: Interface activated: veth0_vlan [ 143.490958][ T6789] netlink: 'syz.2.335': attribute type 10 has an invalid length. [ 143.499449][ T6789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.335'. [ 143.523026][ T6789] batman_adv: batadv0: Adding interface: veth0_vlan [ 143.542052][ T6790] Dead loop on virtual device ip6_vti0, fix it urgently! [ 143.548020][ T6789] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.649849][ T6789] batman_adv: batadv0: Interface activated: veth0_vlan [ 144.051458][ T6799] team0: Port device team_slave_0 removed [ 144.179723][ T6797] delete_channel: no stack [ 144.426962][ T6810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.340'. [ 144.526263][ T6817] netlink: 'syz.2.341': attribute type 9 has an invalid length. [ 144.540824][ T6817] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.341'. [ 144.991535][ T6834] netlink: 'syz.1.347': attribute type 10 has an invalid length. [ 145.009074][ T6834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.347'. [ 146.122439][ T6854] netlink: 156 bytes leftover after parsing attributes in process `syz.0.356'. [ 146.317991][ T6857] netlink: 152 bytes leftover after parsing attributes in process `syz.0.356'. [ 146.747813][ T6861] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.359'. [ 146.939793][ T6864] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.360'. [ 147.178012][ T6868] netlink: 'syz.2.362': attribute type 9 has an invalid length. [ 147.190517][ T6868] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.362'. [ 147.226807][ T6872] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 147.722662][ T6879] netlink: 'syz.0.366': attribute type 10 has an invalid length. [ 147.732902][ T6879] __nla_validate_parse: 1 callbacks suppressed [ 147.732937][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.366'. [ 147.754889][ T6880] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 147.754988][ T6877] netlink: 'syz.1.365': attribute type 9 has an invalid length. [ 147.873646][ T6877] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.365'. [ 147.954074][ T6883] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 147.991025][ T6882] netlink: 'syz.3.367': attribute type 9 has an invalid length. [ 147.995479][ T6883] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 148.023516][ T6882] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.367'. [ 148.039649][ T6883] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 151.312875][ T6927] sctp: [Deprecated]: syz.2.380 (pid 6927) Use of int in maxseg socket option. [ 151.312875][ T6927] Use struct sctp_assoc_value instead [ 151.345457][ T6920] netlink: 'syz.0.378': attribute type 9 has an invalid length. [ 151.354088][ T6920] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.378'. [ 152.610067][ T6942] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 152.641417][ T6942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 152.803448][ T6940] netlink: 1002 bytes leftover after parsing attributes in process `syz.2.384'. [ 152.861827][ T6940] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 154.509243][ T6966] netlink: 'syz.3.393': attribute type 9 has an invalid length. [ 154.529655][ T6966] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.393'. [ 156.111000][ T6985] netlink: 'syz.1.399': attribute type 10 has an invalid length. [ 156.119348][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.399'. [ 157.918563][ T7062] netlink: 'syz.1.405': attribute type 9 has an invalid length. [ 157.957488][ T7062] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.405'. [ 158.508332][ T7065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.217868][ T7081] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 161.243022][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.411'. [ 161.966689][ T7089] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 161.987279][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.417'. [ 162.256180][ T7106] netlink: 152 bytes leftover after parsing attributes in process `syz.2.422'. [ 162.439644][ T7110] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 162.464533][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.531360][ T7110] bridge_slave_1: left allmulticast mode [ 162.554410][ T7110] bridge_slave_1: left promiscuous mode [ 162.561346][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.676978][ T7113] netlink: 196 bytes leftover after parsing attributes in process `syz.2.425'. [ 162.700420][ T7110] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 163.328970][ T5785] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 165.400790][ T5785] Bluetooth: hci3: command tx timeout [ 167.096765][ T7183] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.451'. [ 168.471264][ T7197] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 168.478311][ T7197] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 168.522340][ T7196] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 168.641725][ T7205] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 168.660857][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 168.867352][ T7210] can: request_module (can-proto-5) failed. [ 168.910998][ T7216] can: request_module (can-proto-5) failed. [ 169.578208][ T7233] netlink: 'syz.0.468': attribute type 5 has an invalid length. [ 169.600720][ T7233] netlink: 176 bytes leftover after parsing attributes in process `syz.0.468'. [ 169.613437][ T7235] netlink: 'syz.1.469': attribute type 21 has an invalid length. [ 169.631850][ T7235] netlink: 128 bytes leftover after parsing attributes in process `syz.1.469'. [ 169.663906][ T7237] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.469'. [ 169.702949][ T7235] netlink: 3 bytes leftover after parsing attributes in process `syz.1.469'. [ 169.751813][ T7239] netlink: 201628 bytes leftover after parsing attributes in process `syz.1.469'. [ 169.861168][ T7239] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 169.989048][ T7245] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 170.475349][ T5785] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 171.227321][ T7260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.476'. [ 172.510828][ T5785] Bluetooth: hci2: command tx timeout [ 173.292442][ T7260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.476'. [ 173.317526][ T7280] IPv6: pim6reg1: Disabled Multicast RS [ 173.588156][ T7288] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.487'. [ 175.231109][ T7302] netlink: 'syz.1.492': attribute type 33 has an invalid length. [ 175.241361][ T7302] netlink: 152 bytes leftover after parsing attributes in process `syz.1.492'. [ 175.250795][ T7302] `: renamed from syz_tun (while UP) [ 175.643357][ T7306] netlink: 'syz.0.494': attribute type 21 has an invalid length. [ 175.670734][ T7306] netlink: 'syz.0.494': attribute type 20 has an invalid length. [ 176.105819][ T7316] netlink: 'syz.2.495': attribute type 10 has an invalid length. [ 176.150930][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.495'. [ 176.992949][ T7323] netlink: 'syz.3.499': attribute type 10 has an invalid length. [ 177.101306][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.499'. [ 177.253033][ T7325] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 177.282172][ T7325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.500'. [ 179.509052][ T7352] netlink: 'syz.3.509': attribute type 10 has an invalid length. [ 179.535377][ T7352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.509'. [ 179.832983][ T7359] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 179.855069][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'. [ 182.209937][ T7386] netlink: 1002 bytes leftover after parsing attributes in process `syz.1.519'. [ 182.261082][ T7386] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 182.597967][ T7394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.523'. [ 183.597366][ T7409] netlink: 'syz.0.528': attribute type 10 has an invalid length. [ 183.648417][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.528'. [ 183.904305][ T7416] netlink: 1002 bytes leftover after parsing attributes in process `syz.2.530'. [ 183.942322][ T7416] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 184.578160][ T7434] Dead loop on virtual device ip6_vti0, fix it urgently! [ 185.077209][ T7443] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 185.142874][ T7443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.540'. [ 185.237337][ T7445] netlink: 'syz.1.541': attribute type 9 has an invalid length. [ 185.256372][ T7445] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.541'. [ 185.300560][ T7449] netlink: 1002 bytes leftover after parsing attributes in process `syz.2.543'. [ 185.333580][ T7449] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 185.688719][ T7451] raw_sendmsg: syz.0.542 forgot to set AF_INET. Fix it! [ 186.548002][ T7458] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 186.557824][ T7458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.545'. [ 187.326082][ T7470] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.549'. [ 188.068092][ T7476] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 188.103386][ T7476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.552'. [ 188.389505][ T7480] netlink: 1002 bytes leftover after parsing attributes in process `syz.2.553'. [ 188.461070][ T7480] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 189.067818][ T7485] netlink: 'syz.3.555': attribute type 9 has an invalid length. [ 189.087087][ T7485] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.555'. [ 191.793745][ T7509] netlink: 'syz.1.564': attribute type 10 has an invalid length. [ 191.806744][ T7509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.564'. [ 192.090674][ T7512] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 192.126448][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.566'. [ 192.373517][ T7520] netlink: 156 bytes leftover after parsing attributes in process `syz.1.568'. [ 192.464109][ T7519] netlink: 1002 bytes leftover after parsing attributes in process `syz.0.565'. [ 192.523146][ T7519] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 192.730236][ T7525] netlink: 'syz.2.569': attribute type 9 has an invalid length. [ 192.738778][ T7525] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.569'. [ 194.597944][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.620734][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.731216][ T7546] netlink: 'syz.1.578': attribute type 39 has an invalid length. [ 194.824790][ T7544] netlink: 'syz.0.577': attribute type 10 has an invalid length. [ 194.835665][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.577'. [ 194.978770][ T7550] netlink: 1002 bytes leftover after parsing attributes in process `syz.2.580'. [ 195.021615][ T7550] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 195.959258][ T7561] netlink: 'syz.0.584': attribute type 7 has an invalid length. [ 197.626984][ T7578] netlink: 1002 bytes leftover after parsing attributes in process `syz.2.590'. [ 197.661029][ T7578] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 198.638525][ T7591] netlink: 'syz.2.595': attribute type 3 has an invalid length. [ 198.710987][ T7591] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.595'. [ 199.290533][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.0.594'. [ 200.397639][ T7606] netlink: 'syz.3.598': attribute type 10 has an invalid length. [ 200.451182][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.598'. [ 201.631426][ T7615] netlink: 'syz.1.601': attribute type 39 has an invalid length. [ 203.166638][ T7622] netlink: 1002 bytes leftover after parsing attributes in process `syz.3.603'. [ 203.216402][ T7622] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 203.499006][ T7624] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 203.543435][ T7624] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.604'. [ 203.612821][ T7624] netlink: 1 bytes leftover after parsing attributes in process `syz.1.604'. [ 205.754782][ T7646] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 205.769302][ T7646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.612'. [ 205.845415][ T7650] netlink: 'syz.3.613': attribute type 39 has an invalid length. [ 205.967888][ T7644] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 206.025365][ T7644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.610'. [ 206.234537][ T7652] netlink: 1002 bytes leftover after parsing attributes in process `syz.1.614'. [ 206.260736][ T7652] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 206.699275][ T7660] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.616'. [ 206.740313][ T7664] netlink: 'syz.2.618': attribute type 5 has an invalid length. [ 206.760000][ T7664] netlink: 176 bytes leftover after parsing attributes in process `syz.2.618'. [ 206.914274][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 206.914344][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 206.921645][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.926571][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 207.015749][ T7673] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 207.019285][ T7670] netlink: 'syz.3.619': attribute type 9 has an invalid length. [ 207.060850][ T7673] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 207.081268][ T7670] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.619'. [ 207.784543][ T7687] netlink: 1002 bytes leftover after parsing attributes in process `syz.3.626'. [ 207.840808][ T7687] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.442421][ T7700] sctp: [Deprecated]: syz.0.631 (pid 7700) Use of int in maxseg socket option. [ 208.442421][ T7700] Use struct sctp_assoc_value instead [ 208.621185][ T7704] netlink: 'syz.3.632': attribute type 10 has an invalid length. [ 208.653117][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.632'. [ 208.906297][ T7712] netlink: 'syz.2.635': attribute type 10 has an invalid length. [ 208.922226][ T7712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.635'. [ 209.588767][ T7727] netlink: 'syz.2.642': attribute type 39 has an invalid length. [ 210.155997][ T7740] netlink: 152 bytes leftover after parsing attributes in process `syz.0.646'. [ 210.175389][ T7740] `: renamed from syz_tun (while UP) [ 210.376267][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.647'. [ 210.579099][ T7748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.649'. [ 211.720493][ T7780] validate_nla: 3 callbacks suppressed [ 211.720529][ T7780] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 211.800836][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'. [ 211.930216][ T7785] netlink: 'syz.1.663': attribute type 10 has an invalid length. [ 211.991080][ T7785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'. [ 213.145882][ T7808] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 213.172448][ T7808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.672'. [ 213.428807][ T7822] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 213.468015][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'. [ 214.329466][ T7850] netlink: 'syz.3.685': attribute type 10 has an invalid length. [ 214.355349][ T7850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.685'. [ 214.478525][ T7853] Dead loop on virtual device ip6_vti0, fix it urgently! [ 214.645659][ T7858] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 214.684387][ T7858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.689'. [ 215.185563][ T7869] netpci0: tun_chr_ioctl cmd 2147767519 [ 215.376005][ T7877] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 215.445666][ T7877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.704'. [ 215.535902][ T7879] netlink: 'syz.2.698': attribute type 30 has an invalid length. [ 215.879782][ T7884] netlink: 196 bytes leftover after parsing attributes in process `syz.1.700'. [ 216.620473][ T7900] netlink: 'syz.0.708': attribute type 10 has an invalid length. [ 216.658030][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.708'. [ 216.702722][ T7904] netlink: 'syz.1.709': attribute type 10 has an invalid length. [ 216.720901][ T7904] netlink: 40 bytes leftover after parsing attributes in process `syz.1.709'. [ 217.208702][ T7916] netlink: 196 bytes leftover after parsing attributes in process `syz.3.712'. [ 217.853620][ T7928] netlink: 'syz.3.716': attribute type 9 has an invalid length. [ 217.863443][ T7928] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.716'. [ 218.526316][ T7935] netlink: 'syz.0.718': attribute type 9 has an invalid length. [ 218.550885][ T7935] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.718'. [ 218.573267][ T7938] netlink: 'syz.0.718': attribute type 10 has an invalid length. [ 218.680350][ T7942] netlink: 1002 bytes leftover after parsing attributes in process `syz.3.721'. [ 218.696317][ T7942] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 218.898632][ T7951] netlink: 'syz.1.725': attribute type 10 has an invalid length. [ 218.965947][ T7953] netlink: 'syz.0.726': attribute type 21 has an invalid length. [ 219.713103][ T7969] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 219.754102][ T7969] __nla_validate_parse: 2 callbacks suppressed [ 219.754152][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.729'. [ 219.791442][ T7972] netlink: 'syz.2.731': attribute type 6 has an invalid length. [ 219.845002][ T7974] netlink: 1002 bytes leftover after parsing attributes in process `syz.0.732'. [ 219.890725][ T7974] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 219.993570][ T7975] aaaaaaaaaaaaaaa: entered promiscuous mode [ 220.021106][ T7979] netlink: 'syz.3.734': attribute type 5 has an invalid length. [ 220.039444][ T7979] netlink: 176 bytes leftover after parsing attributes in process `syz.3.734'. [ 220.139504][ T7981] netlink: 'syz.0.735': attribute type 10 has an invalid length. [ 220.151031][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 220.289041][ T7983] netlink: 'syz.3.736': attribute type 9 has an invalid length. [ 220.310933][ T7983] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.736'. [ 220.953595][ T8010] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.746'. [ 221.184081][ T8013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.747'. [ 221.664877][ T8024] team0: Device hsr_slave_0 failed to register rx_handler [ 221.805921][ T8027] netlink: 40 bytes leftover after parsing attributes in process `syz.1.752'. [ 222.340158][ T8039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.757'. [ 222.360512][ T8039] `: renamed from syz_tun (while UP) [ 222.504922][ T8041] netlink: 1002 bytes leftover after parsing attributes in process `syz.3.758'. [ 222.520254][ T8041] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 223.010250][ T8056] validate_nla: 12 callbacks suppressed [ 223.010293][ T8056] netlink: 'syz.1.764': attribute type 10 has an invalid length. [ 223.319379][ T8064] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 224.271324][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 226.070002][ T8097] __nla_validate_parse: 3 callbacks suppressed [ 226.070020][ T8097] netlink: 1002 bytes leftover after parsing attributes in process `syz.3.780'. [ 226.096037][ T8097] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 227.082946][ T8122] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.791'. [ 227.211004][ T8122] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 227.443611][ T5785] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 227.531970][ T8129] netlink: 'syz.0.795': attribute type 21 has an invalid length. [ 227.563652][ T8129] netlink: 176 bytes leftover after parsing attributes in process `syz.0.795'. [ 228.115172][ T8136] netlink: 196 bytes leftover after parsing attributes in process `syz.1.796'. [ 228.420523][ T8143] netlink: 'syz.2.798': attribute type 10 has an invalid length. [ 228.455117][ T8143] netlink: 40 bytes leftover after parsing attributes in process `syz.2.798'. [ 228.586077][ T8145] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 228.605366][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.799'. [ 228.774609][ T8150] syzkaller0: entered promiscuous mode [ 228.800752][ T8150] syzkaller0: entered allmulticast mode [ 228.941635][ T8155] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.803'. [ 228.981347][ T8155] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 231.448552][ T8168] netlink: 196 bytes leftover after parsing attributes in process `syz.3.807'. [ 231.583955][ T8175] netlink: 128 bytes leftover after parsing attributes in process `syz.2.809'. [ 231.638404][ T8175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.695441][ T8178] netlink: 'syz.2.809': attribute type 3 has an invalid length. [ 231.737321][ T8178] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.809'. [ 232.016539][ T8189] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.814'. [ 232.025915][ T8189] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 232.127787][ T8191] netlink: 'syz.0.813': attribute type 10 has an invalid length. [ 232.140380][ T8191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.813'. [ 232.487892][ T8197] netlink: 'syz.0.816': attribute type 9 has an invalid length. [ 232.537153][ T8197] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.816'. [ 233.336638][ T8219] netlink: 'syz.3.822': attribute type 6 has an invalid length. [ 233.550856][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 233.690855][ T8224] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.823'. [ 233.725283][ T8224] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 233.935084][ T8232] netlink: 'syz.2.827': attribute type 5 has an invalid length. [ 233.956928][ T8232] netlink: 176 bytes leftover after parsing attributes in process `syz.2.827'. [ 234.448972][ T8242] netlink: 'syz.1.832': attribute type 9 has an invalid length. [ 234.464024][ T8242] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.832'. [ 234.528536][ T8242] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 234.612606][ T8242] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 234.705160][ T8251] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.834'. [ 234.778564][ T8254] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 235.638707][ T8280] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 237.296169][ T8311] netlink: 'syz.2.857': attribute type 10 has an invalid length. [ 237.330106][ T8311] team0: Device hsr_slave_0 failed to register rx_handler [ 237.770203][ T8322] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 237.788782][ T8322] __nla_validate_parse: 2 callbacks suppressed [ 237.788808][ T8322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'. [ 237.822965][ T8318] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.860'. [ 237.833916][ T8318] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 238.094045][ T8325] netlink: 'syz.1.863': attribute type 3 has an invalid length. [ 238.124020][ T8325] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.863'. [ 238.397739][ T8335] can: request_module (can-proto-5) failed. [ 238.420926][ T8336] can: request_module (can-proto-5) failed. [ 238.614826][ T8344] netlink: 'syz.2.867': attribute type 2 has an invalid length. [ 238.642412][ T8344] netlink: 132 bytes leftover after parsing attributes in process `syz.2.867'. [ 238.680904][ T8348] netlink: 'syz.0.869': attribute type 33 has an invalid length. [ 238.698519][ T8348] netlink: 152 bytes leftover after parsing attributes in process `syz.0.869'. [ 239.119459][ T8354] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.870'. [ 239.340092][ T8355] netlink: 'syz.0.871': attribute type 10 has an invalid length. [ 239.360550][ T8355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.871'. [ 239.599693][ T8359] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.874'. [ 239.610540][ T8359] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 243.478790][ T8393] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 243.487656][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.886'. [ 243.548487][ T8395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.887'. [ 244.538279][ T8411] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 245.875026][ T8451] netlink: 'syz.1.910': attribute type 10 has an invalid length. [ 245.889090][ T8451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.910'. [ 246.322402][ T8457] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 246.365522][ T8465] netlink: 196 bytes leftover after parsing attributes in process `syz.3.915'. [ 246.514530][ T8457] team0: Device wg1 is of different type [ 246.928639][ T8454] delete_channel: no stack [ 248.442942][ T8510] netlink: 'syz.2.932': attribute type 10 has an invalid length. [ 248.460482][ T8510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.932'. [ 248.479141][ T8507] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.931'. [ 248.500854][ T8507] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 249.078418][ T8521] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 249.527295][ T8536] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.942'. [ 249.542967][ T8536] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 249.870947][ T8544] netlink: 'syz.2.943': attribute type 10 has an invalid length. [ 249.890745][ T8544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.943'. [ 250.506221][ T8555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.947'. [ 250.531964][ T8559] netlink: 152 bytes leftover after parsing attributes in process `syz.1.948'. [ 250.558378][ T8555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.947'. [ 250.608146][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.2.947'. [ 250.649566][ T8561] netlink: 'syz.3.949': attribute type 6 has an invalid length. [ 250.730349][ T8555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.947'. [ 251.351924][ T8575] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 251.369901][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.954'. [ 251.423113][ T8580] netlink: 6 bytes leftover after parsing attributes in process `syz.2.956'. [ 251.591100][ T8586] netlink: 'syz.1.959': attribute type 19 has an invalid length. [ 251.607243][ T8586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.959'. [ 251.822286][ T8587] delete_channel: no stack [ 252.396152][ T8605] netlink: 'syz.3.967': attribute type 10 has an invalid length. [ 253.498291][ T8618] delete_channel: no stack [ 253.743128][ T8631] netlink: 'syz.1.980': attribute type 10 has an invalid length. [ 253.855304][ T8637] syz.2.982 (8637) used obsolete PPPIOCDETACH ioctl [ 254.358990][ T8648] syzkaller0: entered promiscuous mode [ 254.382416][ T8650] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 254.408676][ T8650] team0: Device hsr_slave_0 failed to register rx_handler [ 256.035841][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.042725][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.525906][ T8667] netlink: 'syz.0.993': attribute type 10 has an invalid length. [ 256.534035][ T8667] __nla_validate_parse: 2 callbacks suppressed [ 256.534049][ T8667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.993'. [ 256.912027][ T8677] sctp: [Deprecated]: syz.1.994 (pid 8677) Use of int in max_burst socket option deprecated. [ 256.912027][ T8677] Use struct sctp_assoc_value instead [ 257.089366][ T8683] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.998'. [ 257.146634][ T8683] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 257.197599][ T8680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.997'. [ 257.230372][ T8680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.997'. [ 257.311266][ T8680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.997'. [ 257.341414][ T8680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.997'. [ 257.425292][ T8692] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 257.451387][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1002'. [ 257.487631][ T8692] ipvlan1: entered promiscuous mode [ 257.538147][ T8692] ipvlan1: entered allmulticast mode [ 257.551029][ T8692] veth0_vlan: entered allmulticast mode [ 257.623309][ T8702] netlink: 'syz.1.1002': attribute type 27 has an invalid length. [ 257.703679][ T8702] netlink: 'syz.1.1002': attribute type 3 has an invalid length. [ 257.866182][ T8692] bridge0: port 2(ipvlan1) entered blocking state [ 257.879895][ T8692] bridge0: port 2(ipvlan1) entered disabled state [ 258.061342][ T8692] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 258.121527][ T8694] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 258.129956][ T8694] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1003'. [ 258.326489][ T8692] syz.1.1002 (8692) used greatest stack depth: 18632 bytes left [ 258.613553][ T8713] sctp: [Deprecated]: syz.2.1009 (pid 8713) Use of int in max_burst socket option deprecated. [ 258.613553][ T8713] Use struct sctp_assoc_value instead [ 258.877585][ T8722] netlink: 'syz.3.1013': attribute type 9 has an invalid length. [ 258.925497][ T8722] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1013'. [ 258.957205][ T8724] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1014'. [ 258.984786][ T8724] tc_dump_action: action bad kind [ 259.673695][ T8742] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 261.621300][ T8788] netlink: 'syz.3.1037': attribute type 10 has an invalid length. [ 261.635432][ T8788] __nla_validate_parse: 3 callbacks suppressed [ 261.635453][ T8788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1037'. [ 261.659871][ T8788] bond0: entered promiscuous mode [ 261.665500][ T8788] bond_slave_0: entered promiscuous mode [ 261.671883][ T8788] bond_slave_1: entered promiscuous mode [ 261.677961][ T8788] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 261.711909][ T8788] bridge0: port 3(bond0) entered blocking state [ 261.730977][ T8788] bridge0: port 3(bond0) entered disabled state [ 261.759988][ T8788] bond0: entered allmulticast mode [ 261.780942][ T8788] bond_slave_0: entered allmulticast mode [ 261.815903][ T8788] bond_slave_1: entered allmulticast mode [ 261.851322][ T8788] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 261.932447][ T8788] bridge0: port 3(bond0) entered blocking state [ 261.938960][ T8788] bridge0: port 3(bond0) entered forwarding state [ 262.012588][ T8794] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 262.031314][ T8794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1042'. [ 262.694197][ T8807] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1048'. [ 262.719430][ T8807] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 262.949063][ T8816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.007166][ T8816] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1052'. [ 263.027361][ T8816] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 263.038950][ T8816] netlink: 'syz.3.1052': attribute type 21 has an invalid length. [ 263.104060][ T8816] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1052'. [ 263.408233][ T8829] netlink: 'syz.0.1056': attribute type 10 has an invalid length. [ 263.429334][ T8829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1056'. [ 263.871752][ T8840] netlink: 'syz.1.1059': attribute type 10 has an invalid length. [ 263.879682][ T8840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1059'. [ 263.966575][ T8840] bond0: entered promiscuous mode [ 263.975956][ T8840] bond_slave_0: entered promiscuous mode [ 263.986310][ T8840] bond_slave_1: entered promiscuous mode [ 264.007203][ T8840] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 264.047669][ T8840] bridge_slave_1: entered promiscuous mode [ 264.108301][ T8840] bridge0: port 2(bond0) entered blocking state [ 264.170883][ T8840] bridge0: port 2(bond0) entered disabled state [ 264.215182][ T8840] bond0: entered allmulticast mode [ 264.244863][ T8840] bond_slave_0: entered allmulticast mode [ 264.329695][ T8840] bond_slave_1: entered allmulticast mode [ 264.420788][ T8840] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 264.504319][ T8840] bridge_slave_1: entered allmulticast mode [ 264.525588][ T8840] bridge0: port 2(bond0) entered blocking state [ 264.532983][ T8840] bridge0: port 2(bond0) entered forwarding state [ 265.313521][ T8857] netlink: 'syz.0.1068': attribute type 10 has an invalid length. [ 265.328425][ T8857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1068'. [ 266.139778][ T8871] netlink: 'syz.1.1074': attribute type 9 has an invalid length. [ 266.217568][ T8871] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1074'. [ 266.259193][ T8880] netlink: 'syz.1.1074': attribute type 10 has an invalid length. [ 266.630884][ T8886] netlink: 'syz.3.1079': attribute type 5 has an invalid length. [ 266.665354][ T8886] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1079'. [ 267.614298][ T8912] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1088'. [ 268.122325][ T8920] netlink: 'syz.1.1090': attribute type 9 has an invalid length. [ 268.132723][ T8921] netlink: 'syz.3.1092': attribute type 10 has an invalid length. [ 268.145651][ T8920] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1090'. [ 268.402323][ T8923] Driver unsupported XDP return value 0 on prog (id 1002) dev N/A, expect packet loss! [ 268.478501][ T8921] veth1_macvtap: left promiscuous mode [ 269.056131][ T8913] delete_channel: no stack [ 269.137653][ T8922] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 269.245307][ T8920] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 270.498237][ T8956] sctp: [Deprecated]: syz.3.1103 (pid 8956) Use of int in max_burst socket option deprecated. [ 270.498237][ T8956] Use struct sctp_assoc_value instead [ 271.154009][ T8955] netlink: 'syz.2.1102': attribute type 10 has an invalid length. [ 271.187003][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1102'. [ 271.255219][ T8955] bond0: entered promiscuous mode [ 271.260377][ T8955] bond_slave_0: entered promiscuous mode [ 271.421180][ T8955] bond_slave_1: entered promiscuous mode [ 271.480157][ T8955] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 271.528743][ T8955] bridge0: port 3(bond0) entered blocking state [ 271.616074][ T8955] bridge0: port 3(bond0) entered disabled state [ 271.663990][ T8955] bond0: entered allmulticast mode [ 271.691236][ T8955] bond_slave_0: entered allmulticast mode [ 271.697067][ T8955] bond_slave_1: entered allmulticast mode [ 271.782173][ T8955] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 271.794684][ T8955] bridge0: port 3(bond0) entered blocking state [ 271.801168][ T8955] bridge0: port 3(bond0) entered forwarding state [ 272.000133][ T8968] netlink: 'syz.0.1107': attribute type 10 has an invalid length. [ 272.052126][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1107'. [ 272.675657][ T8985] netlink: 'syz.2.1114': attribute type 10 has an invalid length. [ 272.707855][ T8985] team0: Device hsr_slave_0 failed to register rx_handler [ 274.499962][ T9016] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1125'. [ 274.520964][ T9016] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 275.233459][ T9022] netlink: 'syz.3.1127': attribute type 10 has an invalid length. [ 275.296307][ T9022] team0: Device hsr_slave_0 failed to register rx_handler [ 275.672979][ T9038] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1135'. [ 275.687096][ T9038] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 276.033355][ T9046] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 276.044218][ T9046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1139'. [ 276.179510][ T9048] Dead loop on virtual device ip6_vti0, fix it urgently! [ 276.813205][ T9063] netlink: 'syz.0.1144': attribute type 10 has an invalid length. [ 276.853174][ T9063] team0: Device hsr_slave_0 failed to register rx_handler [ 277.332337][ T9073] netlink: 'syz.0.1151': attribute type 10 has an invalid length. [ 277.372346][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1151'. [ 278.351973][ T9099] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1161'. [ 278.489754][ T9106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'. [ 278.521164][ T9106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1163'. [ 279.272114][ T9127] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1168'. [ 280.446113][ T9149] netlink: 'syz.0.1176': attribute type 10 has an invalid length. [ 280.498099][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1176'. [ 281.310206][ T9162] sctp: [Deprecated]: syz.2.1181 (pid 9162) Use of int in max_burst socket option deprecated. [ 281.310206][ T9162] Use struct sctp_assoc_value instead [ 281.504256][ T9170] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1185'. [ 281.539821][ T9170] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1185'. [ 281.628291][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.657111][ T9168] netlink: 'syz.3.1184': attribute type 9 has an invalid length. [ 281.665795][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.690989][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.696285][ T9168] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1184'. [ 281.718912][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.765593][ T9170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.798409][ T9170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.829338][ T9170] batadv_slave_1: entered promiscuous mode [ 282.154523][ T9180] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1188'. [ 282.406447][ T9186] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 282.439897][ T9186] __nla_validate_parse: 1 callbacks suppressed [ 282.439912][ T9186] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1191'. [ 282.557212][ T9188] netlink: 'syz.3.1191': attribute type 10 has an invalid length. [ 282.581102][ T9188] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1191'. [ 283.709900][ T9221] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1200'. [ 284.164818][ T9228] netlink: 'syz.1.1203': attribute type 10 has an invalid length. [ 284.182676][ T9228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1203'. [ 284.823278][ T9246] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1211'. [ 284.863923][ T9246] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1211'. [ 285.263022][ T9255] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1211'. [ 285.327750][ T9259] netlink: 'syz.3.1216': attribute type 10 has an invalid length. [ 285.339439][ T9259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1216'. [ 285.397499][ T9155] delete_channel: no stack [ 286.324215][ T9282] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 286.369228][ T9282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 286.949851][ T9293] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1230'. [ 291.076415][ T9322] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 291.110798][ T9322] __nla_validate_parse: 5 callbacks suppressed [ 291.110831][ T9322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1247'. [ 291.401156][ T9330] netlink: 'syz.0.1251': attribute type 10 has an invalid length. [ 291.427448][ T9330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1251'. [ 291.752890][ T9339] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1245'. [ 291.771002][ T9339] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1245'. [ 291.884980][ T5785] Bluetooth: hci0: Malformed LE Event: 0x1b [ 292.107616][ T9346] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1245'. [ 293.378592][ T9367] netlink: 'syz.3.1257': attribute type 10 has an invalid length. [ 293.394902][ T9367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1257'. [ 294.176117][ T9393] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1266'. [ 294.198780][ T9393] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1266'. [ 294.410873][ T9395] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1266'. [ 294.588717][ T9400] netlink: 'syz.3.1270': attribute type 10 has an invalid length. [ 294.638969][ T9400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1270'. [ 296.217759][ T9430] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 296.230183][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1284'. [ 296.642843][ T9446] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1291'. [ 297.157862][ T9460] netlink: 'syz.0.1298': attribute type 10 has an invalid length. [ 297.198545][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1298'. [ 297.221845][ T9463] netlink: 'syz.3.1299': attribute type 21 has an invalid length. [ 297.241985][ T9463] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1299'. [ 297.502147][ T9473] netlink: 'syz.0.1303': attribute type 3 has an invalid length. [ 297.516869][ T9473] netlink: 'syz.0.1303': attribute type 1 has an invalid length. [ 297.546933][ T9473] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1303'. [ 297.752295][ T9483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1303'. [ 297.805860][ T9483] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1303'. [ 297.939058][ T9485] netlink: 'syz.1.1308': attribute type 10 has an invalid length. [ 298.031209][ T9485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1308'. [ 298.055501][ T9473] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1303'. [ 298.076415][ T9478] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1303'. [ 298.280188][ T9494] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 298.366011][ T9496] netlink: 'syz.1.1312': attribute type 10 has an invalid length. [ 298.502158][ T9503] FAULT_INJECTION: forcing a failure. [ 298.502158][ T9503] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 298.541382][ T9503] CPU: 1 PID: 9503 Comm: syz.3.1315 Not tainted syzkaller #0 [ 298.548846][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.558953][ T9503] Call Trace: [ 298.562270][ T9503] [ 298.565325][ T9503] dump_stack_lvl+0x18c/0x250 [ 298.570057][ T9503] ? show_regs_print_info+0x20/0x20 [ 298.575299][ T9503] ? load_image+0x420/0x420 [ 298.579852][ T9503] ? __might_fault+0xaa/0x120 [ 298.584587][ T9503] ? __lock_acquire+0x7d40/0x7d40 [ 298.589669][ T9503] should_fail_ex+0x39d/0x4d0 [ 298.594412][ T9503] _copy_from_user+0x2f/0xe0 [ 298.599058][ T9503] ___sys_sendmsg+0x1c7/0x360 [ 298.603777][ T9503] ? get_pid_task+0x20/0x1e0 [ 298.608437][ T9503] ? __sys_sendmsg+0x2a0/0x2a0 [ 298.613293][ T9503] ? __lock_acquire+0x7d40/0x7d40 [ 298.618435][ T9503] __se_sys_sendmsg+0x1c2/0x2b0 [ 298.623349][ T9503] ? __x64_sys_sendmsg+0x80/0x80 [ 298.628364][ T9503] ? lockdep_hardirqs_on+0x98/0x150 [ 298.633640][ T9503] do_syscall_64+0x55/0xb0 [ 298.638104][ T9503] ? clear_bhb_loop+0x40/0x90 [ 298.642828][ T9503] ? clear_bhb_loop+0x40/0x90 [ 298.647858][ T9503] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.653808][ T9503] RIP: 0033:0x7f735a79ce59 [ 298.658263][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.677901][ T9503] RSP: 002b:00007f735b579028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.686334][ T9503] RAX: ffffffffffffffda RBX: 00007f735aa15fa0 RCX: 00007f735a79ce59 [ 298.694668][ T9503] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 298.702655][ T9503] RBP: 00007f735b579090 R08: 0000000000000000 R09: 0000000000000000 [ 298.710638][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.718619][ T9503] R13: 00007f735aa16038 R14: 00007f735aa15fa0 R15: 00007ffeb6057b78 [ 298.726636][ T9503] [ 299.188464][ T9522] netlink: 'syz.3.1324': attribute type 21 has an invalid length. [ 299.223896][ T9524] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 300.129953][ T9547] sctp: [Deprecated]: syz.1.1336 (pid 9547) Use of int in max_burst socket option deprecated. [ 300.129953][ T9547] Use struct sctp_assoc_value instead [ 301.114354][ T9576] sctp: [Deprecated]: syz.2.1346 (pid 9576) Use of int in max_burst socket option deprecated. [ 301.114354][ T9576] Use struct sctp_assoc_value instead [ 302.380354][ T9585] delete_channel: no stack [ 303.007687][ T9608] sctp: [Deprecated]: syz.1.1358 (pid 9608) Use of int in max_burst socket option deprecated. [ 303.007687][ T9608] Use struct sctp_assoc_value instead [ 304.583093][ T9646] sctp: [Deprecated]: syz.1.1373 (pid 9646) Use of int in max_burst socket option deprecated. [ 304.583093][ T9646] Use struct sctp_assoc_value instead [ 304.840534][ T9654] __nla_validate_parse: 7 callbacks suppressed [ 304.840550][ T9654] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1377'. [ 304.909299][ T9654] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1377'. [ 305.184691][ T9667] pim6reg1: entered promiscuous mode [ 305.190055][ T9667] pim6reg1: entered allmulticast mode [ 305.328591][ T9669] validate_nla: 5 callbacks suppressed [ 305.328645][ T9669] netlink: 'syz.3.1382': attribute type 9 has an invalid length. [ 305.376743][ T9669] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1382'. [ 305.827216][ T9671] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1384'. [ 305.876801][ T9679] sctp: [Deprecated]: syz.0.1386 (pid 9679) Use of int in max_burst socket option deprecated. [ 305.876801][ T9679] Use struct sctp_assoc_value instead [ 306.372214][ T9684] netlink: 'syz.2.1388': attribute type 9 has an invalid length. [ 306.399930][ T9687] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 306.468936][ T9684] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1388'. [ 307.142667][ T9704] netlink: 'syz.0.1395': attribute type 10 has an invalid length. [ 307.163202][ T9704] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1395'. [ 307.181206][ T9704] hsr0: entered promiscuous mode [ 307.201536][ T9704] bridge0: port 3(hsr0) entered blocking state [ 307.223256][ T9704] bridge0: port 3(hsr0) entered disabled state [ 307.249896][ T9704] hsr0: entered allmulticast mode [ 307.271758][ T9704] hsr_slave_0: entered allmulticast mode [ 307.277635][ T9704] hsr_slave_1: entered allmulticast mode [ 307.281073][ T9709] sctp: [Deprecated]: syz.3.1397 (pid 9709) Use of int in max_burst socket option deprecated. [ 307.281073][ T9709] Use struct sctp_assoc_value instead [ 307.287379][ T9704] bridge0: port 3(hsr0) entered blocking state [ 307.305543][ T9704] bridge0: port 3(hsr0) entered forwarding state [ 307.952918][ T9718] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1400'. [ 308.782380][ T9733] sctp: [Deprecated]: syz.2.1407 (pid 9733) Use of int in max_burst socket option deprecated. [ 308.782380][ T9733] Use struct sctp_assoc_value instead [ 309.652192][ T9762] sctp: [Deprecated]: syz.1.1418 (pid 9762) Use of int in max_burst socket option deprecated. [ 309.652192][ T9762] Use struct sctp_assoc_value instead [ 311.101550][ T9783] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 311.318160][ T9783] team0: Port device hsr_slave_0 added [ 311.391877][ T9791] sctp: [Deprecated]: syz.3.1429 (pid 9791) Use of int in max_burst socket option deprecated. [ 311.391877][ T9791] Use struct sctp_assoc_value instead [ 311.823200][ T9804] sctp: [Deprecated]: syz.1.1439 (pid 9804) Use of int in max_burst socket option deprecated. [ 311.823200][ T9804] Use struct sctp_assoc_value instead [ 312.269510][ T9809] sctp: [Deprecated]: syz.0.1441 (pid 9809) Use of int in max_burst socket option deprecated. [ 312.269510][ T9809] Use struct sctp_assoc_value instead [ 313.491003][ T9856] sctp: [Deprecated]: syz.1.1448 (pid 9856) Use of int in max_burst socket option deprecated. [ 313.491003][ T9856] Use struct sctp_assoc_value instead [ 314.958319][ T9886] sctp: [Deprecated]: syz.0.1464 (pid 9886) Use of int in max_burst socket option deprecated. [ 314.958319][ T9886] Use struct sctp_assoc_value instead [ 316.095755][ T9915] sctp: [Deprecated]: syz.1.1477 (pid 9915) Use of int in max_burst socket option deprecated. [ 316.095755][ T9915] Use struct sctp_assoc_value instead [ 317.099345][ T9935] sctp: [Deprecated]: syz.0.1488 (pid 9935) Use of int in max_burst socket option deprecated. [ 317.099345][ T9935] Use struct sctp_assoc_value instead [ 317.511648][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.518072][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.515923][ T9958] netlink: 'syz.3.1496': attribute type 10 has an invalid length. [ 318.528354][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1496'. [ 318.643306][ T9962] sctp: [Deprecated]: syz.0.1498 (pid 9962) Use of int in max_burst socket option deprecated. [ 318.643306][ T9962] Use struct sctp_assoc_value instead [ 319.196323][ T9970] FAULT_INJECTION: forcing a failure. [ 319.196323][ T9970] name failslab, interval 1, probability 0, space 0, times 1 [ 319.229946][ T9970] CPU: 0 PID: 9970 Comm: syz.0.1502 Not tainted syzkaller #0 [ 319.237448][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.247859][ T9970] Call Trace: [ 319.251171][ T9970] [ 319.254142][ T9970] dump_stack_lvl+0x18c/0x250 [ 319.258837][ T9970] ? show_regs_print_info+0x20/0x20 [ 319.264060][ T9970] ? load_image+0x420/0x420 [ 319.268617][ T9970] ? __might_sleep+0xe0/0xe0 [ 319.273260][ T9970] ? __lock_acquire+0x7d40/0x7d40 [ 319.278350][ T9970] should_fail_ex+0x39d/0x4d0 [ 319.283089][ T9970] should_failslab+0x9/0x20 [ 319.287602][ T9970] slab_pre_alloc_hook+0x59/0x310 [ 319.292632][ T9970] ? __lock_acquire+0x7d40/0x7d40 [ 319.297745][ T9970] kmem_cache_alloc_node+0x60/0x320 [ 319.302949][ T9970] ? __alloc_skb+0x103/0x2c0 [ 319.307556][ T9970] __alloc_skb+0x103/0x2c0 [ 319.311987][ T9970] netlink_sendmsg+0x66a/0xbf0 [ 319.316752][ T9970] ? lockdep_hardirqs_on+0x98/0x150 [ 319.321955][ T9970] ? netlink_getsockopt+0x590/0x590 [ 319.327172][ T9970] ? netlink_getsockopt+0x590/0x590 [ 319.332376][ T9970] ____sys_sendmsg+0x5ba/0x960 [ 319.337164][ T9970] ? __asan_memset+0x22/0x40 [ 319.341825][ T9970] ? __sys_sendmsg_sock+0x30/0x30 [ 319.346852][ T9970] ? __import_iovec+0x5f2/0x850 [ 319.351706][ T9970] ? import_iovec+0x73/0xa0 [ 319.356225][ T9970] ___sys_sendmsg+0x2a6/0x360 [ 319.360908][ T9970] ? __sys_sendmsg+0x2a0/0x2a0 [ 319.365700][ T9970] __se_sys_sendmsg+0x1c2/0x2b0 [ 319.370571][ T9970] ? __x64_sys_sendmsg+0x80/0x80 [ 319.375540][ T9970] ? syscall_enter_from_user_mode+0x2e/0x80 [ 319.381453][ T9970] do_syscall_64+0x55/0xb0 [ 319.385885][ T9970] ? clear_bhb_loop+0x40/0x90 [ 319.390565][ T9970] ? clear_bhb_loop+0x40/0x90 [ 319.395266][ T9970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.401183][ T9970] RIP: 0033:0x7fcb5bd9ce59 [ 319.405602][ T9970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.425316][ T9970] RSP: 002b:00007fcb5cd4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.433755][ T9970] RAX: ffffffffffffffda RBX: 00007fcb5c015fa0 RCX: 00007fcb5bd9ce59 [ 319.441734][ T9970] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 319.449816][ T9970] RBP: 00007fcb5cd4c090 R08: 0000000000000000 R09: 0000000000000000 [ 319.457805][ T9970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.465806][ T9970] R13: 00007fcb5c016038 R14: 00007fcb5c015fa0 R15: 00007ffec7c2a2a8 [ 319.473810][ T9970] [ 319.918768][ T9983] sctp: [Deprecated]: syz.1.1508 (pid 9983) Use of int in max_burst socket option deprecated. [ 319.918768][ T9983] Use struct sctp_assoc_value instead [ 321.027685][T10011] sctp: [Deprecated]: syz.0.1520 (pid 10011) Use of int in max_burst socket option deprecated. [ 321.027685][T10011] Use struct sctp_assoc_value instead [ 321.995064][T10043] sctp: [Deprecated]: syz.0.1533 (pid 10043) Use of int in max_burst socket option deprecated. [ 321.995064][T10043] Use struct sctp_assoc_value instead [ 322.334390][T10050] netlink: 'syz.2.1535': attribute type 30 has an invalid length. [ 322.876443][T10069] sctp: [Deprecated]: syz.2.1544 (pid 10069) Use of int in max_burst socket option deprecated. [ 322.876443][T10069] Use struct sctp_assoc_value instead [ 323.396532][T10070] delete_channel: no stack [ 324.173312][T10100] sctp: [Deprecated]: syz.0.1555 (pid 10100) Use of int in max_burst socket option deprecated. [ 324.173312][T10100] Use struct sctp_assoc_value instead [ 324.374340][T10104] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1557'. [ 324.419888][T10104] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1557'. [ 325.062975][T10124] sctp: [Deprecated]: syz.0.1567 (pid 10124) Use of int in max_burst socket option deprecated. [ 325.062975][T10124] Use struct sctp_assoc_value instead [ 325.185622][T10133] netlink: 'syz.2.1570': attribute type 6 has an invalid length. [ 325.485480][T10143] netlink: 'syz.3.1573': attribute type 5 has an invalid length. [ 325.514329][T10143] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1573'. [ 325.961476][T10155] netlink: 'syz.3.1579': attribute type 9 has an invalid length. [ 325.969936][T10155] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1579'. [ 326.022777][T10155] netlink: 'syz.3.1579': attribute type 10 has an invalid length. [ 326.096697][T10157] sctp: [Deprecated]: syz.0.1580 (pid 10157) Use of int in max_burst socket option deprecated. [ 326.096697][T10157] Use struct sctp_assoc_value instead [ 328.234853][T10200] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1595'. [ 328.439488][T10205] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1598'. [ 329.519979][T10229] netlink: 'syz.3.1607': attribute type 10 has an invalid length. [ 329.545034][T10229] team0: Device hsr_slave_0 failed to register rx_handler [ 330.418441][T10252] netlink: 'syz.2.1617': attribute type 33 has an invalid length. [ 330.437389][T10252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1617'. [ 330.566526][ C0] ================================================================== [ 330.574667][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 330.582524][ C0] Write of size 32 at addr ffff888061337310 by task syz.1.1619/10256 [ 330.590644][ C0] [ 330.592998][ C0] CPU: 0 PID: 10256 Comm: syz.1.1619 Not tainted syzkaller #0 [ 330.600484][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 330.610562][ C0] Call Trace: [ 330.613869][ C0] [ 330.616728][ C0] dump_stack_lvl+0x18c/0x250 [ 330.621433][ C0] ? read_lock_is_recursive+0x20/0x20 [ 330.626832][ C0] ? show_regs_print_info+0x20/0x20 [ 330.632057][ C0] ? load_image+0x420/0x420 [ 330.636586][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 330.642081][ C0] ? __virt_addr_valid+0x18c/0x540 [ 330.647261][ C0] ? __virt_addr_valid+0x469/0x540 [ 330.652414][ C0] print_report+0xa8/0x210 [ 330.656857][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 330.661995][ C0] kasan_report+0x117/0x150 [ 330.666525][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 330.671665][ C0] kasan_check_range+0x241/0x290 [ 330.676626][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 330.681768][ C0] __asan_memcpy+0x40/0x70 [ 330.686216][ C0] __bpf_get_stackid+0x6bf/0x900 [ 330.691189][ C0] bpf_get_stackid_pe+0x343/0x410 [ 330.696241][ C0] bpf_prog_43b50326510579ba+0x29/0x3e [ 330.701724][ C0] bpf_overflow_handler+0x1fc/0x510 [ 330.706957][ C0] ? verify_lock_unused+0x140/0x140 [ 330.712271][ C0] ? bpf_overflow_handler+0xde/0x510 [ 330.717584][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 330.722995][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 330.729273][ C0] __perf_event_overflow+0x447/0x630 [ 330.734592][ C0] perf_swevent_hrtimer+0x439/0x610 [ 330.739826][ C0] ? cpu_clock_event_read+0x40/0x40 [ 330.745072][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 330.751019][ C0] ? _raw_spin_unlock+0x40/0x40 [ 330.755915][ C0] __hrtimer_run_queues+0x4e1/0xc40 [ 330.761156][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 330.767178][ C0] ? cpu_clock_event_read+0x40/0x40 [ 330.772424][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 330.777578][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 330.783691][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 330.788678][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 330.794612][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 330.800289][ C0] [ 330.803248][ C0] [ 330.806207][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.812240][ C0] RIP: 0010:syscall_enter_from_user_mode+0x2e/0x80 [ 330.818789][ C0] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 e9 fa ff ff 66 90 66 90 e8 e0 3c 05 f7 e8 9b 3c 05 f7 fb 65 48 8b 05 12 54 7b 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 5d 77 eb f6 48 [ 330.838442][ C0] RSP: 0018:ffffc9000356ff08 EFLAGS: 00000286 [ 330.844551][ C0] RAX: ffff888029390000 RBX: 00000000000000ca RCX: 9346d9cdb79aed00 [ 330.852561][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 330.860574][ C0] RBP: ffffc9000356ff48 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 330.868586][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: 0000000000000000 [ 330.876602][ C0] R13: 0000000000000000 R14: ffffc9000356ff58 R15: 0000000000000000 [ 330.884620][ C0] ? syscall_enter_from_user_mode+0x25/0x80 [ 330.890600][ C0] do_syscall_64+0x28/0xb0 [ 330.895044][ C0] ? clear_bhb_loop+0x40/0x90 [ 330.899740][ C0] ? clear_bhb_loop+0x40/0x90 [ 330.904434][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.910350][ C0] RIP: 0033:0x7f994919ce59 [ 330.914784][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.934406][ C0] RSP: 002b:00007f994a06a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 330.942830][ C0] RAX: ffffffffffffffda RBX: 00007f9949415fa8 RCX: 00007f994919ce59 [ 330.950806][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9949415fac [ 330.958783][ C0] RBP: 00007f9949415fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 330.966765][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.974739][ C0] R13: 00007f9949416038 R14: 00007ffc4b052900 R15: 00007ffc4b0529e8 [ 330.982726][ C0] [ 330.985747][ C0] [ 330.988075][ C0] Allocated by task 10256: [ 330.992505][ C0] kasan_set_track+0x4e/0x70 [ 330.997103][ C0] __kasan_kmalloc+0x8f/0xa0 [ 331.001698][ C0] __kmalloc_node+0xb4/0x230 [ 331.006295][ C0] bpf_map_area_alloc+0x5e/0x110 [ 331.011253][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 331.016980][ C0] stack_map_alloc+0x33a/0x4c0 [ 331.021754][ C0] map_create+0x877/0x12f0 [ 331.026176][ C0] __sys_bpf+0x651/0x890 [ 331.030420][ C0] __x64_sys_bpf+0x7c/0x90 [ 331.034861][ C0] do_syscall_64+0x55/0xb0 [ 331.039282][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.045186][ C0] [ 331.047509][ C0] Last potentially related work creation: [ 331.053219][ C0] kasan_save_stack+0x3e/0x60 [ 331.057922][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 331.063301][ C0] call_rcu+0x153/0x950 [ 331.067481][ C0] __nf_register_net_hook+0x788/0x910 [ 331.072862][ C0] nf_register_net_hook+0xb2/0x190 [ 331.078005][ C0] nf_register_net_hooks+0x44/0x1b0 [ 331.083228][ C0] nf_ct_netns_do_get+0x3c0/0x5c0 [ 331.088257][ C0] nf_ct_netns_inet_get+0x1f/0x150 [ 331.093373][ C0] nf_conncount_init+0x127/0x380 [ 331.098322][ C0] ovs_ct_init+0x316/0x490 [ 331.102745][ C0] ovs_init_net+0x1e6/0x250 [ 331.107250][ C0] ops_init+0x397/0x640 [ 331.111409][ C0] setup_net+0x3b6/0xa30 [ 331.115653][ C0] copy_net_ns+0x36d/0x5e0 [ 331.120066][ C0] create_new_namespaces+0x3d3/0x6f0 [ 331.125355][ C0] copy_namespaces+0x430/0x4a0 [ 331.130147][ C0] copy_process+0x1724/0x3dc0 [ 331.134828][ C0] kernel_clone+0x24b/0x8a0 [ 331.139332][ C0] __x64_sys_clone+0x1b7/0x230 [ 331.144102][ C0] do_syscall_64+0x55/0xb0 [ 331.148553][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.154541][ C0] [ 331.156866][ C0] Second to last potentially related work creation: [ 331.163449][ C0] kasan_save_stack+0x3e/0x60 [ 331.168140][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 331.173531][ C0] call_rcu+0x153/0x950 [ 331.177697][ C0] __nf_register_net_hook+0x788/0x910 [ 331.183079][ C0] nf_register_net_hook+0xb2/0x190 [ 331.188215][ C0] nf_register_net_hooks+0x44/0x1b0 [ 331.193420][ C0] brnf_device_event+0x132/0x1d0 [ 331.198364][ C0] notifier_call_chain+0x197/0x380 [ 331.203482][ C0] register_netdevice+0x16a5/0x1bb0 [ 331.208686][ C0] br_dev_newlink+0x27/0x100 [ 331.213282][ C0] rtnl_newlink+0x1542/0x20a0 [ 331.217965][ C0] rtnetlink_rcv_msg+0x869/0xfa0 [ 331.222910][ C0] netlink_rcv_skb+0x241/0x4d0 [ 331.227677][ C0] netlink_unicast+0x751/0x8d0 [ 331.232442][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 331.237209][ C0] __sys_sendto+0x4a9/0x6b0 [ 331.241720][ C0] __x64_sys_sendto+0xde/0xf0 [ 331.246396][ C0] do_syscall_64+0x55/0xb0 [ 331.250817][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.256717][ C0] [ 331.259053][ C0] The buggy address belongs to the object at ffff888061337300 [ 331.259053][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 331.273214][ C0] The buggy address is located 16 bytes inside of [ 331.273214][ C0] allocated 40-byte region [ffff888061337300, ffff888061337328) [ 331.287287][ C0] [ 331.289616][ C0] The buggy address belongs to the physical page: [ 331.296051][ C0] page:ffffea000184cdc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61337 [ 331.306204][ C0] memcg:ffff88801fbbb201 [ 331.310441][ C0] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 331.318425][ C0] page_type: 0xffffffff() [ 331.322757][ C0] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 0000000000000001 [ 331.331345][ C0] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88801fbbb201 [ 331.340360][ C0] page dumped because: kasan: bad access detected [ 331.346855][ C0] page_owner tracks the page as allocated [ 331.352580][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5776, tgid 5776 (syz-executor), ts 80469281706, free_ts 26906550419 [ 331.370900][ C0] post_alloc_hook+0x1c1/0x200 [ 331.375675][ C0] get_page_from_freelist+0x1951/0x19e0 [ 331.381223][ C0] __alloc_pages+0x1f0/0x460 [ 331.385812][ C0] alloc_slab_page+0x5d/0x160 [ 331.390496][ C0] new_slab+0x87/0x2d0 [ 331.394571][ C0] ___slab_alloc+0xc5d/0x12f0 [ 331.399280][ C0] __kmem_cache_alloc_node+0x19e/0x250 [ 331.404918][ C0] __kmalloc_node+0xa4/0x230 [ 331.409513][ C0] kvmalloc_node+0x70/0x180 [ 331.414023][ C0] nf_hook_entries_grow+0x27d/0x6d0 [ 331.419231][ C0] __nf_register_net_hook+0x2c9/0x910 [ 331.424606][ C0] nf_register_net_hook+0xb2/0x190 [ 331.429723][ C0] nf_register_net_hooks+0x44/0x1b0 [ 331.434927][ C0] brnf_device_event+0x132/0x1d0 [ 331.439870][ C0] notifier_call_chain+0x197/0x380 [ 331.444990][ C0] register_netdevice+0x16a5/0x1bb0 [ 331.450204][ C0] page last free stack trace: [ 331.454875][ C0] free_unref_page_prepare+0x7b2/0x8c0 [ 331.460362][ C0] free_unref_page+0x32/0x2e0 [ 331.465043][ C0] free_contig_range+0xa1/0x150 [ 331.469905][ C0] destroy_args+0x80/0x850 [ 331.474326][ C0] debug_vm_pgtable+0x411/0x440 [ 331.479184][ C0] do_one_initcall+0x242/0x790 [ 331.483960][ C0] do_initcall_level+0x137/0x1f0 [ 331.488904][ C0] do_initcalls+0x69/0xd0 [ 331.493244][ C0] kernel_init_freeable+0x3ed/0x580 [ 331.498449][ C0] kernel_init+0x1d/0x1c0 [ 331.502786][ C0] ret_from_fork+0x48/0x80 [ 331.507474][ C0] ret_from_fork_asm+0x11/0x20 [ 331.512246][ C0] [ 331.514569][ C0] Memory state around the buggy address: [ 331.520226][ C0] ffff888061337200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 331.528301][ C0] ffff888061337280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 331.536371][ C0] >ffff888061337300: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 331.544430][ C0] ^ [ 331.549822][ C0] ffff888061337380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 331.557903][ C0] ffff888061337400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 331.566052][ C0] ================================================================== [ 331.574115][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 331.581308][ C0] CPU: 0 PID: 10256 Comm: syz.1.1619 Not tainted syzkaller #0 [ 331.588771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.598832][ C0] Call Trace: [ 331.602117][ C0] [ 331.604968][ C0] dump_stack_lvl+0x18c/0x250 [ 331.609675][ C0] ? show_regs_print_info+0x20/0x20 [ 331.614925][ C0] ? load_image+0x420/0x420 [ 331.619434][ C0] panic+0x2dc/0x730 [ 331.623336][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 331.628398][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 331.632915][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 331.638816][ C0] ? _raw_spin_unlock+0x40/0x40 [ 331.643699][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 331.648815][ C0] check_panic_on_warn+0x84/0xa0 [ 331.653760][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 331.658901][ C0] end_report+0x6f/0x130 [ 331.663148][ C0] kasan_report+0x128/0x150 [ 331.667654][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 331.672777][ C0] kasan_check_range+0x241/0x290 [ 331.677729][ C0] ? __bpf_get_stackid+0x6bf/0x900 [ 331.682846][ C0] __asan_memcpy+0x40/0x70 [ 331.687273][ C0] __bpf_get_stackid+0x6bf/0x900 [ 331.692222][ C0] bpf_get_stackid_pe+0x343/0x410 [ 331.697266][ C0] bpf_prog_43b50326510579ba+0x29/0x3e [ 331.702819][ C0] bpf_overflow_handler+0x1fc/0x510 [ 331.708031][ C0] ? verify_lock_unused+0x140/0x140 [ 331.713238][ C0] ? bpf_overflow_handler+0xde/0x510 [ 331.718530][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 331.723830][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 331.730093][ C0] __perf_event_overflow+0x447/0x630 [ 331.735384][ C0] perf_swevent_hrtimer+0x439/0x610 [ 331.740676][ C0] ? cpu_clock_event_read+0x40/0x40 [ 331.745888][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 331.751790][ C0] ? _raw_spin_unlock+0x40/0x40 [ 331.756648][ C0] __hrtimer_run_queues+0x4e1/0xc40 [ 331.761850][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 331.767862][ C0] ? cpu_clock_event_read+0x40/0x40 [ 331.773086][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 331.778219][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 331.784298][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 331.789274][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 331.795209][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 331.800863][ C0] [ 331.803796][ C0] [ 331.806734][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.812748][ C0] RIP: 0010:syscall_enter_from_user_mode+0x2e/0x80 [ 331.819257][ C0] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 e9 fa ff ff 66 90 66 90 e8 e0 3c 05 f7 e8 9b 3c 05 f7 fb 65 48 8b 05 12 54 7b 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 5d 77 eb f6 48 [ 331.838870][ C0] RSP: 0018:ffffc9000356ff08 EFLAGS: 00000286 [ 331.844953][ C0] RAX: ffff888029390000 RBX: 00000000000000ca RCX: 9346d9cdb79aed00 [ 331.852932][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 331.860906][ C0] RBP: ffffc9000356ff48 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 331.868882][ C0] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: 0000000000000000 [ 331.876874][ C0] R13: 0000000000000000 R14: ffffc9000356ff58 R15: 0000000000000000 [ 331.884858][ C0] ? syscall_enter_from_user_mode+0x25/0x80 [ 331.890763][ C0] do_syscall_64+0x28/0xb0 [ 331.895208][ C0] ? clear_bhb_loop+0x40/0x90 [ 331.899972][ C0] ? clear_bhb_loop+0x40/0x90 [ 331.904652][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.910558][ C0] RIP: 0033:0x7f994919ce59 [ 331.914991][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.934606][ C0] RSP: 002b:00007f994a06a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.943025][ C0] RAX: ffffffffffffffda RBX: 00007f9949415fa8 RCX: 00007f994919ce59 [ 331.951003][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9949415fac [ 331.958986][ C0] RBP: 00007f9949415fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 331.967134][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.975109][ C0] R13: 00007f9949416038 R14: 00007ffc4b052900 R15: 00007ffc4b0529e8 [ 331.983118][ C0] [ 331.986386][ C0] Kernel Offset: disabled [ 331.990724][ C0] Rebooting in 86400 seconds..