last executing test programs: 4.739496455s ago: executing program 3 (id=3437): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 4.51920194s ago: executing program 3 (id=3438): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000000000067, 0x0, &(0x7f00000003c0)=[{0x0, 0xfffffffe, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000002b40)=""/4123, 0x101b}, {&(0x7f0000000500)=""/215, 0xd7}, {&(0x7f0000000380)=""/134, 0x86}], 0x5}, 0x20) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x80) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r7, 0x5452, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff]}}], 0x18}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) 3.847749736s ago: executing program 0 (id=3441): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0xa, 0x2, 0x73) close(r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803c9", 0x2f}], 0x1}, 0x40001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1}, 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111a80000000000851000000200000085000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x144, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5eaa000000000000611067000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000b000000000000000000000009020000000000"], 0x0, 0x3e}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r5, 0x20, &(0x7f00000003c0)={0x0, 0x5b, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) 3.735205474s ago: executing program 2 (id=3442): r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000000, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x99}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r4, 0x8, 0x18, 0xffffffffffffff11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x40) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x43, &(0x7f0000000000)=r3, 0x4) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x7, 0x3, 0xff, 0xfff}]}) r6 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xc0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x20012, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc, 0x0, @perf_bp, 0x101910, 0x8, 0x200, 0x7, 0xb1, 0x20000000, 0x4, 0x0, 0x7, 0x0, 0x1}, r6, 0x5, r0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f00000004c0)=""/161, 0xa1}, {&(0x7f0000000580)=""/136, 0x88}], 0x6}, 0x10140) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000000840)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x3}}, 0x80, 0x0}, 0x440d0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x600000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0x10, 0x0, &(0x7f0000000200)="0000000000000000000000000000a7c0", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x480, 0x0) 3.478456581s ago: executing program 3 (id=3444): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000017c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x4024050) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0xc8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffcfe6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131014010ff"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0x8, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000c7c5ee759fb6d958cdf8e4a9772f4fe3cfb6fa6ae156600d5be3024d8157b405225a96050046636abf067b00e994f90c02289429d59bbe7ff8f71a71f6", @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f61006100"], 0x0, 0x58}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x19) 2.676526266s ago: executing program 1 (id=3445): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x21, 0x7, 0xfffffff8, 0x2, 0x840, r5, 0x2, '\x00', r6, r7, 0x3, 0x0, 0x3}, 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) (async) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x2000, 0x64656461}}, 0x10, 0x0}, 0x0) 2.61920102s ago: executing program 0 (id=3446): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x4, 0x4}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1008}, 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c", 0x21}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x4, 0x0, 0xc48, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000}) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.617995861s ago: executing program 2 (id=3447): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f00000000c0)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) 2.505972658s ago: executing program 3 (id=3448): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 2.486192289s ago: executing program 2 (id=3449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000e5cd00006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc166b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f20ff0f0000000000005dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142db5bdb0032c0b748cf0cfee621589fb3a20b407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce0787a375da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2ac4020000006e00c5b2200a91cbc0c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c243291c9b6300000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000100000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e4411b422a35d3ec4752da0588e42cdbc5fcd245ce5e3ef0dca24931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006e1c38db117fb1115221a661605f4bb9172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e3c9d21f4a3ebbd3fabf6da9a1a1f869a339f67010000100000000734fd1147d45da1a30964e15a19b33c8644fff71b0162f2e1b827e2663e06a751182e968c8ab05fa1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac6b5c58ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a834564e7191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213296cd4ecfd30efe137641471987289b8a00482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745727a44c77d097f69d19fe86f71c38a0226d44ea00ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cf7c377626b557ad31fdee17ba7bb235416e72c84afef2bdb08fb375147b028b89f15bc8976b91158c13c9876daa71e7db0f3f17376be39ea79ce1246c547c740e31c64e5d293e0e5a564dd166b60e61d6ccae46c173b8e1707b15c7d4f9d612a14c2156f4050ebefb69503fdd45e75fee4766694e890940ca9e02da1213440a3dec50ed065ceb3ae84b45163f37dbfeaec7bff2d98d877f81fa184b17f94fc26e3ab969efcd72554766939637835a0340b78e94076e8508d32f1448755216e1b12319bfb0704f27fcd939ee95729b870147346e70415da2ea338a792a0bb0a747b019d2a07c2ab71f220415129f3fea51d39f3dfa96e751d23c880e1fc9bc36432446f25bbb8432946dd3f4d6d753e3c7290358ac1089bd24345d2f55598262624125cfa2fae0eee9f2f6f50261a2cac50a335d5f8fca61c8cd9694144da20eff19ad230c9a43"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x0, &(0x7f0000001340)="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", 0x1000, &(0x7f0000002340), &(0x7f0000002380), &(0x7f00000023c0)="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") (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000a40)="f9b5", &(0x7f0000000a80), 0x2}, 0x20) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5760, 0x0) (async) r8 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc634, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808e}, 0x40000100) (async) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2.396764156s ago: executing program 1 (id=3450): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x1, &(0x7f0000000400)=""/121, 0x79}, 0x100) (async) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/172, 0xac}], 0x1, &(0x7f0000000400)=""/121, 0x79}, 0x100) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x521}, 0x57) socket$kcm(0x2, 0x922000000001, 0x106) (async) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0)=r5, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x58, &(0x7f00000004c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@var={0xa, 0x0, 0x0, 0xe, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @struct={0xb, 0x2, 0x0, 0x4, 0x1, 0x4, [{0xa, 0x3, 0x10000}, {0x1, 0x2, 0x1d}]}, @volatile={0xe}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000640)=""/230, 0x81, 0xe6, 0x0, 0x2, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x81, 0xd, 0x5, 0x404, r2, 0x2a66, '\x00', r6, r7, 0x2, 0x2, 0x4, 0x6}, 0x50) socketpair(0x15, 0x4, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0014000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a29045bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9d428d9ab6fd1364c3871e66b30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd8}], 0x1}, 0x0) 2.250260796s ago: executing program 2 (id=3451): socket$kcm(0x29, 0x2, 0x0) (async) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000000100)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xc42b}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)="936def8017a852432dc751b502867f6737ecb9560907ee79469e0d017553b56633f66a99a801cb52af20d37c69ee9383b942d6cf7680072699a3adb91af4d5e096dfc1306afb719ac6f2c76a2970d7a2f0c648828ed20c0601bc89bbd0c44f7177b439c2c3c4c7fa93ccac9cd503c1297aaafb3f739f65d8a977ef06b3513975e3a459f1bda4c4f4aa676c7bf7d207def012831dc315087923a6cccaa2cdfe084bd23deb2c21cda5054a8063c1e10bea9072fde9654f37eb120505312babc7456e592884d97bf07aceecc8a10ecd97dd34afa288a2bcf2871a91f331f7689fb6b962c621525b4b5427ee8ef73a27", 0xee}, {&(0x7f0000000280)="2925eaadae", 0x5}, {&(0x7f00000002c0)="f6b40ccf90fd52bcb471f5f1521a356abefdc507cb225bbf9486fbcbbd8aadc0e8e583b70e31335fa35f0617deedd27e77015925d669e0c55eb108b57db4c817b66041d362efbc77df1fd92115961bd8bb9a35ca00494f2c3617c17ee5855e57a32aa18b9603a98812c9893596d37e2bd3eb491cc1a7dec171cc00074fc367afb6ebb997851b80c7d3e7d1d690d5913158bd341ebcf5182f3d58e20b35a4a8bae1b974894f8e8b8b127b1a9b5f988d87fdb17c8f33b698f3009e302b27b4f86ad5e0181cd8d4a84abbcd9b3867fca617", 0xd0}, {&(0x7f00000003c0)="473719d794675d46d4cb13f119afb1345bb8f20e235f46d89dc3260b0114b4fcd23e9544355afae7dc1902dc451d7be5372e0af04fffcb4e55d368a43326329e9af63cf0fe7b8a14dfade913cacadf443b155ab7dc74f22a859bdc07af6040cd0663f755b1aa2ee08cbe41e02977352ed8609b9df6d7d0fabf548f36543aa43a64e8374161c8525b9c5f9cccf005d0807c31efdcbc1cb62f6ad028b225a9582d270afe3b954168d291240f191c39d4609cd227dad42b", 0xb6}, {&(0x7f0000000480)="d2a1", 0x2}, {&(0x7f00000004c0)="3355a82a08d4c39da25e51deb76e34df12d729f49d8cf8f16dc2dd7dd06b9b824be2e461f17f52d49509eca766994910b88141dfa42d4d2cc262f5f22248c41771b61cde024e5246fb403b9d3fa61e07a5de0880acfc7ced591aea99c0bd59852ba8076396e221a77c0aeda53c4ab1cddf57c9d146e11773452708aabe0827c6813c", 0x82}, {&(0x7f0000000580)="9b624ce8319d8dbe7aaa38585d49613baa4a26006490cf27b7ff926bee12d3f38e677efc94e67722f799a3923735a61ab0b877cb803cd71369ceb86e6f551867a1c71cc27da83c6b602d084774ca623bf4f5d2bd44adb695078beecbd84b9e8caf71431782ecf47ee99a0a2d103b583d5ddef44880b07ef68e911e92f93706b2ed398634c0f2b69bb829e8c306b797e680b3e277c374e8fa8f2acf15ddd87243cac210b3eba862db280fc623d678e80a79911b5dcaa0c026926c355ad543e8bd669e192dcab1b95ad1ffb0d1093b375ec9213a17d2d1102e71fedb3bc39bfd99dc3ad4cf65508f427a9e12f9b5f796ee22f49cc117698632c34863496f8a7f693ae1b5a4714ebda229dd08de9e159bea62562fe721989934d619d5ef9f956339d012a86cd52fa3c14067b1c7c7a704e117edad579a570d82230c4d9f6475cbeb4f0bb25fa8993eb45986499da59d5f09b6a0926b175011e19f875fa7e26a0752396f80e69df197c95fd16b3306eea5566823636e9c1dc8fb2d49dbd8347333aeef080cd5d43ff25e1f05c64c6b5ad3a3a8c50980f41481eceff3cd2328efefd84749063e132310b5eb94fb4f910ec74f00e6793f1dbcd01500d268f34be17723a0bbfaeeeeeeafd942cb4095f7a76ac39291a98e2f9d532ce25332067933440c2267c49969b1887f635010b364b8388a92cea797ade220fadefceaf4de17e81541f68aa6aebfd01f7cd401e48b4f2facb666a4189a63710567414ebefa7c17e93da8527022bed73f52debeb4f720415fb5be6bc3566fef611ac59259ce2a3ee602be6ab74540945834f0eca56835bbac02c351d968525847db1f088664e7b5fb6c0389c308a40f8c8cd7dfbdf143a6b19d5f70e4766c184ec9f13d5a45d9e134bee720f7541440c094d0db120dda8de46666d48d11ac525b2cd77435a284c1746bc58787293080e219f73b42ed8a2ae3ce19074aebc9b81740da5fd39b309a77c044fdfc2c123bb9b00b00782ea41fd50194047b9e6ce53e6b615e3accfd5958fd18c66a80e6380c55cb1739be101ac4c004de880d51ac18a93266ed8cd7fb024ca282933f10bd4809a420c16dc62262a75d5454466ee5638cb22fd628740d954bd0936eca53bd4204171258fa32dbe00b78c0244133ed493e2d19824ff5ba1e998a8ed113e6b16a002dbf4851641960db9f7f8221cb7358a0973a5b2fe89ff68db867c22825f58224e3fda69bffd218519cebaa5ba2d8e6a561c67f52547d76c345cb45141a2d59b57ab905014abbf8226b3fba4f629763cce2704087d9c5ddef19c57c275060abe2767519d3028e7815fd309ed83a121f69799f1dacf4dc63534e00a43c829317e9ac0d66c14187039b23b29a19f40e68038be334ec61520edd0e6ad8ba90cb044432adca94a0a1021d0699ba7f02d3270023ee3f28ade9610dc742f1ac1e0697aca482f7fc5426fce8c6e2a0501025be1a71976ba2e4eac21ea24b4343f648282fcc47267d92379f27f55ec30b1d7fa096371e8b8b3e3ffd47d01129d5c9b2509a4ee17e3a877f4ced41223bb333e19067ea229e603a7a5b5765452d41f2eaef2da17cc6ab5f95555c31d00225992b5cc373a2f822b3e910c1a30c0e6933e22ac46416bda094b433352f0822b4047b481f48d488303f31bdb78c2384fae4bacb54b888d8764385c7a141f32ecf7f973ccaeafdd90189fdfa7c9ec13943e7c79ef74836906153a67ac2c333771055d15d0927065340a37545ebbb1b07ae5ab5a339df9df10e7a46b975b19b7b840decf8dcb868504f56140cc8a48ec3eb00e5ed1f3b65dcc95291b77b15112eba643647720c771d2896cbe640e6c20eb38bcad6ca1beac60fc2baeb57221de9b02835b3898e071424d7ea34b8ed60dfaa432ad56bad70dc9ba603000125581f7b81e25c83003c6d55368accef70d5624b717cea3488ab8f64829c21b8abba8c9c275576a15c77a43ab8f4e025f0a09a55e3dc3074d5cb9c2afd93f48981c84e41577c2058dee665b35ab24dbdc3001b08666e7c75de9026ed4a9f0c5d360e444f6d3c5a628f14b8c11539138009031b54c401bb20c89099d8d4a14f9667491cdc1cce6c00bdc888e4deca6abf8e0947913eae86d8c32d079efb9c98b02a756b6945be8186a92025cad45736d23b2ec2cce5b8ce6e51d23b52ddce290af84366fdfd204e66be5811d1a6b5e4067bb94eb14d7c1ff37f73395faf9a660af380dc03c1f4ce61ae4fd62762d197f9c1fad77a7b2d79e637589cb4c5da083b51a8dfe27d6b2af85aed988a840811c74417043d82198e0005f739c17c327392d11025727130975cccf34e744e45bbc403effe82e44f8543e982f53772571cd684b4abb8d5837367926057da6afadbc59aab9d18f4a8166f3a5d20ed33a7a08fe0feb44fe9f6d666977df06067a5f772a26450373a5d69fbdf55bf17566b9644500b29b57f20c42ec2c0b24cc2e463f3a276b350be4692d0167b681c9811ff9ac8b1bd4b0d87cdceac4b5d46cfb95324d4af704f2311123a0e829668509cf877c569fd42632183b96c2bd3c44fd74ac8cb32864ec49b17979c4eba65782078a839f3caa382ab8647fad3b3dcd5f4852125fa2f36b8652eadff9f5e506e1b4649953d7fe567730a314e87a8f2c8d2a3acca1493dfc76b8b655e36b6ea1c3c8326d973d16973ca8b9b782220d08d62735954dfc3b13d47fab2479203102e3a9ddde1ed9f26b798d8134bfda6cd21a70f0936635eefe3abee20d76ffbfddd6afc011dba261efa502b16aca7b35777ff971064424a25ccd42b5e1227e173fd895da32c2e00778cb1ffc5738390780c369187e5eb600c92af9599fa5eebb0dfb66de4bbf0b70accdf9f71b67c2fc3cfe6cfc29ae4ba24ba89fcac5fd338a7e6dc168a3318fedd8c7e74a24fc643aca2631c027be1bdc2431f424b490504a7669e6db211e80ea21c319cd5602533982fe2e007b18184085209834a740171ae786da5b097906375f43aebd8cd246a32a8a4ee8277570a659d36e25c0389d985c1f2dd9bf03012900016d149be70085da00142ffdf27251fe693be0a0fb181cf6af36c66da30e385a60ba9a8011dba65e2c6345fd8b9681a54307e0f6ce7b26ca829e261b21546dc5b0da3480e6ff98005ee31411822f8a9388951300ee5692f89ea9269208ab5bc556331f752609c30b8b84d60922bb1e5c712f5e94869ba02d0290d153b91a43690051627fa513956aabb7c08905808acb3e34ed9ced769626b7075afc14f33a41a90f0942950349f4cde4fb8ee8350393bf67953f70fde991738a86d0da4973de3084e040cfc52c68cc9911028c538cce9af02b251c941cbaa2e7ca8b96fcd928f1fd83095d2484167cc91795f08e087860775fa5a648dbacfa11bb4eb75996e8721ef4e87d74e285c0cbaa8ce777ed72c17ae6e9878d5807e19a97cf2a9cba8ca6ddbb8dec28e56c4f015926109679bead4b9a848606e2881280fc99c589ecf8d5e62cc9714da7b3f4bd6ac7645f50e47e673017fc55a15bc89140ab4e98b6b73c325c9532eb5f692fc44e648e43cf203501678895571cb6b56962e4e3151687d9f2540e6ef36dca9df3243799a8087e17f26ee96f54e16c0a7bc99c3b77703fcdefafb81812ee1610280daf10c74ff7946ef02bb0bc33229aa817ce7effbddea3abcedd78887ebd0a8bf8d596eb129ec78a24862f8ac327df9ae4c01e0cf05ac8821b92e808c11b179f1178c7393871b8ccc3703cd792f1d7e56c4925ee66c05fba9c4c19e102f1deba39695a937dd8dc96c39548b7eb4c7cabecc91dc1a9b09c8ed0e93cb1104625e215bfd77b21db14db750b94f7107c36aa0ac23c57e5bd5d5ac87ccb39317cc70aa8720a7bd3c0670ba6656709a9c6d1ce7c7dd89d5f524193031718722fb16ff89f432d90972ff31ce347bd5fe20eaff631e172b69e2feacf9189643bb53919fb56ee8b64ca699fbaf9228995bdf068c41e458bf76dc9585c8345d90765405f2e8d4bcbb60af8c4d0e09e1eab1b8ccf36ba165a6c8ca63ab3d4163583c7cea760b14a798d4c2efe0230456918a5714ddbefb1efda4412f039f9c9a9b4e57edf9023ea50a8c82e9fa62ef9098e2f8812728b366c018ae180c20f688386dc60d6d374448e29721627f4fa1d4a0382868c659b03b2de71ae6dccd7936a6510b7e58dbe791caa9034b0b7b3ed7d597bb33df07dacbcb09423d897d4c220290d9d355e300b4034c05634bd007eb5a6d62b8e82496fcba15445df6bf413da499f6a828c4b53e5c60020dd287c8aa4707a014c07b7b9efd81d3dfdae9acf70a2cc210ff91c4287fc753b6b7544278056b3d7ca16951c68686da04fbc746a602149a2add39b82a4ecdbec2088747f9b8a632dd1afd9dbe4726d473b117613897e143b510dab485a199cb1b7923c796d523a8d281a55946f901516215200af38d6e3437472037959f8586c155f13692e9b20fffa993c5f61d0d8961e4f6e371bf7944fa02021abfdbc091f5080fdc024b6a96718ee91e3444c0825c1e6d26295b8b08d12853b21fec56d49389253072e3d8ce042ca5dcc761d0558c6cc4aabe64e7493525f6934e5e5225cf09c1811a9c31ae572a1a765e9a6f52000c0f91a6fc8a8b4e5c7eba403498a20eca2f14cdbc5960c167f4559258f86acafbe11b94bb4c6aff361b79f3501a3321962ba3fc6911f02cb1acb589a6da9d29633e21f50b1c38ad272889f884c38c4abf611db7409e82b612a417410044f2d7f23af9cf1cb3bc32660e2f76c7b9260641e5933637b7cb42182ff2e0ef8397781491ba0a5229b54788f08d0f929f9a4c12a748a44f6c74c0792c79f60c7b1a0b898a4fc6093db801e77e4f8057cd99d76fedd7ce2278463866a368c187a6233c324973353fc8550d7ca390b70807af628023c3b8b3b3a0e68f2471afc32e85d73226bfccc03bc6c8076b4ae654e4b950ee5c5542a15c68715ed85d54670d6b31f00049b988633e1c8f6f6359f6bcd2d24fade331de25f351a70dbae7284f7e7fdc4366ba1fc7d7b89c4e85203b5c43754539b9f12b76804a0611e644fc9357bd9fe24da68c43e54510b261b8d6ac3de8f96a2a7c636dd520d2be25440ec920820a019fc2503747aa7bc7e373a20251c55fbbe440d7bcc77daee2ac2df89b9901f0eddc9e62fac8cad4dc5771a8423a4ecd5709bf768fa656b1d9b714956ca49614594d4bb9ea9751fa3156c8c4ca3e2292d084076c3c1bd2ff843c97a72b404aefd1266eaf662d56121b29095a53c19d60fae04858e79bd6b3d5e989b95a69c4828b175126e8ebe707c6ba11344aefdbc969b9a97fd03a705bcd6168f3dd459e46d2ce15bce5576b7378973914f9027340cd0295231fd4cd05ada3a7197918f13f76d63fbde7f61ba45a2ca63efce207a50db64993eecc035d7815e6f090e8b03af0f81dd874aca5419a5f45972262617e20fde9d73b9a0f608711fc2828ad4af88b112706eebb319f8cff59dcb1d7eab21ece5b1bb0f9ae9fd15a3b6b0ccd4ca67a50a08c41bbfe9927d6fd482cbd2f2c93e946b052277a778966fe4c456c9d8def4c14dcaf3dcd7e3ad23bd722b763f832108ee93ba1a9f61173560cb6a2305c8ca0a0ba296e82e02ffb0450ce32813082085d267aa9458505fc188df1cbd52e1b0532720d2f23c641e57b2954a67c6bcb2f66bd9ba9641481bdc68c4f5578661930c2e737d221eeaa4db9358cb4b58c1ea0f18d021dbe0edc391fdf383535bcb302425e782c507196", 0x1000}], 0x7, &(0x7f0000001600)=[{0xe0, 0x107, 0x1, "8640160af0d5c4d4152d65d976845ab6d36fa85f69caaae0d70d8f33997941e50a7e9eeec75303535261c8da854c16572a7ec3e107b8fafafdf7dcbdef4cf93f633e597427a85b30b32e18d9ee22f26995fc25f19597af8113865f6c7b160c8bc10f806cd3909fe95c12793a76899598372cd8423caa8a2e6608b86baf82b1cf0f8ca37fe004f8a4c16597f561c630e61c71d98515595e7c01ec41cc775d82a71c658d5cf4a0e9cf226f0d206b57ee457e22dc76a45bc840982c38da7bc11864e0fd7d567be8cdeabbd5b916e8"}, {0xe0, 0x117, 0x7, "71e849ea209dfe0309d1a62b41f5e475d7a386b28d4f57ba5930d938e69372a0d596309dfc5b29fa4fdf265a1f1e05188d5e242b545573de45d54cfa283e3ac5a09e7ee70e5946beca11a0d1115347104827a9dba5ef7fd1ac598216d703c05676941f645dfea421e45dd7226afa80d1eb3973ce1b7bd64315e4bd6b00b2238a62d5c0e4616cdceef6c70e120be1268060bb037e7d44f0c2b2cc5c6fc603f5f301687d0f6312b224a5f8bf3dd46a6557d426f21adf729e3ee36e9c8bfd5b92dbe356df34f31012bfdf86"}, {0x50, 0x102, 0x0, "e158b9188040443b8aa5205d19fbb65953d1bd7e68bc0789dac2eac766cd87794db72affe6e31bd0b82d9d9f31e3eee6480024f2fee3b409c1563833"}], 0x210}, 0x8000) openat$cgroup_int(r2, &(0x7f0000001880)='cpu.weight\x00', 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001900)=@o_path={&(0x7f00000018c0)='\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a40)={@fallback=r1, 0x0, 0x1, 0x3, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001b00)={0x2ab5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a80)={@cgroup=r7, r4, 0x1, 0x2034, 0x0, @void, @void, @value=r8, @void, r6}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001b40)={'syz_tun\x00', @multicast}) perf_event_open(&(0x7f0000001b80)={0x4, 0x80, 0x1, 0x3, 0x1, 0x4, 0x0, 0x2, 0x10b, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x40, 0x80}, 0x10, 0x7, 0x6, 0x4, 0x1, 0x1, 0x1, 0x0, 0x80, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, r5, 0x8) (async) r9 = perf_event_open(&(0x7f0000001b80)={0x4, 0x80, 0x1, 0x3, 0x1, 0x4, 0x0, 0x2, 0x10b, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x40, 0x80}, 0x10, 0x7, 0x6, 0x4, 0x1, 0x1, 0x1, 0x0, 0x80, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xa, r5, 0x8) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d00)={@cgroup=r7, 0x26, 0x1, 0x10, &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001c40)=[0x0, 0x0, 0x0], &(0x7f0000001c80)=[0x0], &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001dc0)=@generic={&(0x7f0000001d80)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001e00)={0x1ff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d40)={@map=r11, 0xffffffffffffffff, 0x28, 0x30, 0x0, @void, @void, @void, @value=r12, r10}, 0x20) write$cgroup_pressure(r5, &(0x7f0000001e40)={'some', 0x20, 0x7, 0x20, 0xfffffffffffffffc}, 0x2f) (async) write$cgroup_pressure(r5, &(0x7f0000001e40)={'some', 0x20, 0x7, 0x20, 0xfffffffffffffffc}, 0x2f) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x11) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x66, '\x00', 0x0, r5, 0x1, 0x4, 0x2}, 0x50) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x66, '\x00', 0x0, r5, 0x1, 0x4, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002200)={r5, 0x58, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002580)={r4, 0xe0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0], 0x0, 0x86, &(0x7f0000002380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000023c0), &(0x7f0000002400), 0x8, 0x32, 0x8, 0x8, &(0x7f0000002440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x12, 0x24, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002040)='GPL\x00', 0xda, 0xfd, &(0x7f0000002080)=""/253, 0x41100, 0xc4, '\x00', r14, @cgroup_sock_addr=0x1f, r5, 0x8, &(0x7f0000002240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002280)={0x4, 0xd, 0x6}, 0x10, r16, 0xffffffffffffffff, 0x4, &(0x7f00000025c0)=[r13, r11, r11], &(0x7f0000002600)=[{0x0, 0x1, 0x9, 0x3}, {0x4, 0x3, 0xb, 0x4}, {0x1, 0x2}, {0x0, 0x1, 0xb}], 0x10, 0x1}, 0x94) (async) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x12, 0x24, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002040)='GPL\x00', 0xda, 0xfd, &(0x7f0000002080)=""/253, 0x41100, 0xc4, '\x00', r14, @cgroup_sock_addr=0x1f, r5, 0x8, &(0x7f0000002240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000002280)={0x4, 0xd, 0x6}, 0x10, r16, 0xffffffffffffffff, 0x4, &(0x7f00000025c0)=[r13, r11, r11], &(0x7f0000002600)=[{0x0, 0x1, 0x9, 0x3}, {0x4, 0x3, 0xb, 0x4}, {0x1, 0x2}, {0x0, 0x1, 0xb}], 0x10, 0x1}, 0x94) sendmsg$inet(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002700)="320a1eadb7ab211bec69d56e8c7e9bca8d693a", 0x13}, {&(0x7f0000002740)="3b0b49aa4a98d07238bbc2a4116eb1bb435b62b0dfc7947958fb34ed21ca31cecdbfb29616d416e40bbb58180de95043df7eb4119e9e4fd88d7111ff1f", 0x3d}, {&(0x7f0000002780)="7e8dfef83c292637e398b8582b717161668f0b7b4d51ca594482edb0303cef290b4f78052c5fef94a297ee898237d8b1ca670e9e93bd67298ac29f282ccbfc932e1187b11765710491e793e8caf109f797ae24c9fa6e3cc0abcfa5265a9bab0465b7c94b415c", 0x66}, {&(0x7f0000002800)="1e9534f862cc8d677ea59b81d3a2fb2e9adc9c0a81496bd331bb5461869da97bc3b9b7609c29791e03d7f15b4603cbeb6111eca5383ebba3efe7ac7e21a3dbef24f916754fe933a9c4f6b9020d77b8bb1ae0cec68ffe824d5355a1cdc6dcd4a9df3eb9526cfae65fdb160e5253d4401f9c145742717dd6d40d938356eaf4f2ae887e8d4c1afa78b007cf179ad7b79940300cf191c76bb9491f8047cc79b3bd9776e4c2db783a64c83fa81ff88d50086662d10abc19948d3f5bea89b075e8feed72f7106cb5f48bc26c", 0xc9}], 0x4, &(0x7f0000002940)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x7, 0xb7, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x17, 0xfa, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @multicast2, @private=0xa010100]}, @lsrr={0x83, 0x23, 0xb3, [@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @remote, @private=0xa010102, @broadcast, @rand_addr=0x64010100, @empty]}, @noop, @noop, @lsrr={0x83, 0x3, 0x60}, @timestamp={0x44, 0x18, 0xa8, 0x0, 0x0, [0xff, 0x3, 0xe35, 0x3, 0xfffffffc]}, @rr={0x7, 0x23, 0xeb, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0xc2, 0x3, "84"}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "888a4de361e7"}]}, @end, @timestamp={0x44, 0x10, 0xff, 0x0, 0x6, [0x7, 0xfff, 0x5]}, @noop, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x9, [0x9, 0x561, 0x81, 0x800, 0x3f2, 0xf]}, @ssrr={0x89, 0xf, 0x43, [@loopback, @remote, @empty]}, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0xb, [{@private=0xa010101, 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x130, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x3, [{0x6, 0x4, "1f59"}, {0x0, 0xd, "f723d4aecd963a28f7b97f"}, {0x5, 0xe, "ac6b6cccc40b59d9a1b3048d"}, {0x7, 0x4, "cbbf"}]}, @noop, @cipso={0x86, 0x32, 0x0, [{0x2, 0x10, "82155187203d458d091f25d88049"}, {0x5, 0x7, "63b445379d"}, {0x6, 0xd, "35c91a8b9dfbea65292b77"}, {0x7, 0x8, "0a94b0db9a9f"}]}, @ssrr={0x89, 0x27, 0x52, [@multicast1, @loopback, @broadcast, @broadcast, @remote, @private=0xa010101, @rand_addr=0x64010101, @loopback, @private=0xa010100]}, @generic={0x86, 0x7, "39d536420b"}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "2b41e6da"}]}, @cipso={0x86, 0x4b, 0x2, [{0x7, 0x12, "cd7184a36e613ae1be55125c5fd09fbc"}, {0x1, 0xa, "2e98ebfb12f8820e"}, {0x7, 0x11, "6430cabe440aa9c4226ecf59ef116e"}, {0x1, 0x4, "c17d"}, {0x0, 0x2}, {0x6, 0x12, "df5539d4bd3ce3040e744b6a89582070"}]}, @timestamp_addr={0x44, 0x3c, 0x16, 0x1, 0x0, [{@broadcast}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@loopback, 0x10}, {@multicast1, 0x3}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @empty, @local}}}], 0x2d8}, 0x48844) (async) sendmsg$inet(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002700)="320a1eadb7ab211bec69d56e8c7e9bca8d693a", 0x13}, {&(0x7f0000002740)="3b0b49aa4a98d07238bbc2a4116eb1bb435b62b0dfc7947958fb34ed21ca31cecdbfb29616d416e40bbb58180de95043df7eb4119e9e4fd88d7111ff1f", 0x3d}, {&(0x7f0000002780)="7e8dfef83c292637e398b8582b717161668f0b7b4d51ca594482edb0303cef290b4f78052c5fef94a297ee898237d8b1ca670e9e93bd67298ac29f282ccbfc932e1187b11765710491e793e8caf109f797ae24c9fa6e3cc0abcfa5265a9bab0465b7c94b415c", 0x66}, {&(0x7f0000002800)="1e9534f862cc8d677ea59b81d3a2fb2e9adc9c0a81496bd331bb5461869da97bc3b9b7609c29791e03d7f15b4603cbeb6111eca5383ebba3efe7ac7e21a3dbef24f916754fe933a9c4f6b9020d77b8bb1ae0cec68ffe824d5355a1cdc6dcd4a9df3eb9526cfae65fdb160e5253d4401f9c145742717dd6d40d938356eaf4f2ae887e8d4c1afa78b007cf179ad7b79940300cf191c76bb9491f8047cc79b3bd9776e4c2db783a64c83fa81ff88d50086662d10abc19948d3f5bea89b075e8feed72f7106cb5f48bc26c", 0xc9}], 0x4, &(0x7f0000002940)=[@ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x7, 0xb7, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x17, 0xfa, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @multicast2, @private=0xa010100]}, @lsrr={0x83, 0x23, 0xb3, [@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @remote, @private=0xa010102, @broadcast, @rand_addr=0x64010100, @empty]}, @noop, @noop, @lsrr={0x83, 0x3, 0x60}, @timestamp={0x44, 0x18, 0xa8, 0x0, 0x0, [0xff, 0x3, 0xe35, 0x3, 0xfffffffc]}, @rr={0x7, 0x23, 0xeb, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0xc2, 0x3, "84"}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "888a4de361e7"}]}, @end, @timestamp={0x44, 0x10, 0xff, 0x0, 0x6, [0x7, 0xfff, 0x5]}, @noop, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x9, [0x9, 0x561, 0x81, 0x800, 0x3f2, 0xf]}, @ssrr={0x89, 0xf, 0x43, [@loopback, @remote, @empty]}, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0xb, [{@private=0xa010101, 0x4}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x130, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x3, [{0x6, 0x4, "1f59"}, {0x0, 0xd, "f723d4aecd963a28f7b97f"}, {0x5, 0xe, "ac6b6cccc40b59d9a1b3048d"}, {0x7, 0x4, "cbbf"}]}, @noop, @cipso={0x86, 0x32, 0x0, [{0x2, 0x10, "82155187203d458d091f25d88049"}, {0x5, 0x7, "63b445379d"}, {0x6, 0xd, "35c91a8b9dfbea65292b77"}, {0x7, 0x8, "0a94b0db9a9f"}]}, @ssrr={0x89, 0x27, 0x52, [@multicast1, @loopback, @broadcast, @broadcast, @remote, @private=0xa010101, @rand_addr=0x64010101, @loopback, @private=0xa010100]}, @generic={0x86, 0x7, "39d536420b"}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "2b41e6da"}]}, @cipso={0x86, 0x4b, 0x2, [{0x7, 0x12, "cd7184a36e613ae1be55125c5fd09fbc"}, {0x1, 0xa, "2e98ebfb12f8820e"}, {0x7, 0x11, "6430cabe440aa9c4226ecf59ef116e"}, {0x1, 0x4, "c17d"}, {0x0, 0x2}, {0x6, 0x12, "df5539d4bd3ce3040e744b6a89582070"}]}, @timestamp_addr={0x44, 0x3c, 0x16, 0x1, 0x0, [{@broadcast}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@loopback, 0x10}, {@multicast1, 0x3}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @empty, @local}}}], 0x2d8}, 0x48844) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0x5, &(0x7f0000002c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8140, 0x0, 0x0, 0x0, 0x1}, [@generic={0x0, 0xe, 0x1, 0x9, 0x2}, @alu={0x4, 0x1, 0xa, 0x2, 0x8, 0x10, 0x8}]}, &(0x7f0000002cc0)='GPL\x00', 0x8, 0x2f, &(0x7f0000002d00)=""/47, 0x41100, 0x1d, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000002d40)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_clone(0x6ee1b85bad1290d7, &(0x7f0000002e40)="309d32aa05bb", 0x6, &(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00)="fd9f566546bf9da3e7e506b1872dc87eaaac70a9810fdf836b4b935753cd8ca4f2cd52db4ae7ab1a6a31d7e330a27bf586563e321a10dbd4f0cabb31e0c4b8199bdc9ac1529a66c3a0dd675eeb8baeebbdd7") (async) syz_clone(0x6ee1b85bad1290d7, &(0x7f0000002e40)="309d32aa05bb", 0x6, &(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00)="fd9f566546bf9da3e7e506b1872dc87eaaac70a9810fdf836b4b935753cd8ca4f2cd52db4ae7ab1a6a31d7e330a27bf586563e321a10dbd4f0cabb31e0c4b8199bdc9ac1529a66c3a0dd675eeb8baeebbdd7") openat$cgroup_int(r7, &(0x7f0000002f80)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000031c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000002fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb065e9e}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000003040)='GPL\x00', 0x9, 0x8e, &(0x7f0000003080)=""/142, 0x40f00, 0x22, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003140)={0x2, 0x2, 0xc3a, 0x80000000}, 0x10, 0x2f8e6, r17, 0x0, &(0x7f0000003180)=[r5], 0x0, 0x10, 0x5}, 0x94) 2.240235516s ago: executing program 0 (id=3452): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) close(r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r1, 0xa, 0x2028}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x62af, 0x62f02, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1000, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="85100000f9ffffffb7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffd817a8f100000000000707040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000000c0)='GPL\x00', 0x74fb, 0x0, 0x0, 0x41000, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xa27e, r12, 0x5, 0x0, &(0x7f0000000240)=[{0x3, 0x3, 0x1, 0xb}, {0x3, 0x5, 0x10, 0x7}, {0x5, 0x5, 0x1}, {0x0, 0x3, 0x8, 0xa}, {0x0, 0x4, 0xf, 0x9}], 0x10, 0x9}, 0x94) 2.079246567s ago: executing program 2 (id=3453): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x7f, 0xfffe, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5eaa000000000000611067000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 1.199354558s ago: executing program 3 (id=3454): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x53) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x400, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe37ea60864160af36504001d0000001d001931a0e69ee517d344ac8f06000000a705251eff82949a3651f60a84c9f4d4938037e70e45c5bbfbffa8499c69dd752d0017675e403f1143e40967c4246eeb65bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000080) recvmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x3}, 0x100) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r1, 0x24, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r8, r10, 0x2a, 0x8, 0x0, @void, @value=r9, @void, @void, r12}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)) 1.174976429s ago: executing program 1 (id=3455): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000640), 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x4041, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(r6) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="184000007e5c00000000000008ffe40095000000000000001921953e39b90e308009e6465c37cc8f50", @ANYRESOCT=r2], 0x0, 0x9, 0x1000, &(0x7f0000002440)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000040)={0x1, 0x200a, 0x3, 0x1}, 0x10, 0x25a7e, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0xd, &(0x7f00000000c0), 0x10) 1.134090962s ago: executing program 0 (id=3456): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x7f, 0x4, 0x3, 0x0, 0xff, 0x60a28, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp, 0x11441, 0x8000000000000001, 0x4, 0x6, 0x3, 0x1, 0xfff8, 0x0, 0x7, 0x0, 0xf5}, r1, 0x5, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) socket$kcm(0xa, 0x5, 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x21, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) getpid() (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x7f, 0x4, 0x3, 0x0, 0xff, 0x60a28, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp, 0x11441, 0x8000000000000001, 0x4, 0x6, 0x3, 0x1, 0xfff8, 0x0, 0x7, 0x0, 0xf5}, r1, 0x5, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000080), &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) (async) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) (async) socket$kcm(0x2, 0x5, 0x84) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x21, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c2688110000000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, 0x0, 0x0) (async) 1.124007173s ago: executing program 2 (id=3457): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x0, 0x2, 0x1, 0x0, 0x2, 0x1020, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb4, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x2210, 0x8000000000000000, 0x101, 0x4, 0x8, 0x5, 0x5, 0x0, 0xfffff7a5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xe}, [@generic={0x6, 0x3, 0x9, 0x5}, @generic={0x7, 0x0, 0x2, 0x5, 0xd}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0xad, &(0x7f0000000380)=""/173, 0x41000, 0x79, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0xc, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000480)=[{0x0, 0x2, 0x10, 0x7}, {0x5, 0x3, 0xc, 0xb}, {0x2, 0x2, 0x5, 0x4}, {0x0, 0x2, 0x2, 0x6}, {0x4, 0x1, 0x7, 0x9}, {0x0, 0x1, 0x7, 0x1}, {0x4, 0x2, 0xf, 0x6}], 0x10, 0x1ff}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711093000000000095000800"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000005c0)={r0}) (async) close(0x3) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000004000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}, {&(0x7f0000000080)="7fdf81b81c625e1f0206b0c62cbc1d193d78ac8ad22881c14662ac27c05367c3e9ee469dc05f640869383656e8ee7a9c4f97c1b5168044aae0160d46de65b2c778f45afd00467ab35e513f7b85d6024e94d0b052d081fdac0f439ccf2a2bab5ea044bde7b5d4d419732d20fe16b41499e9466fa74d5dc518f010f6873f5387bd0e2d0127aad898342c0cf6d197", 0x8d}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 875.19289ms ago: executing program 1 (id=3458): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000006112780000000000950000070000000093225ca8497c16eb820c7c207a42bd19840386418e9632dcb397a09704f7228311b67b76c9122c649d38ead76a2580e16c6e07428d449ea2c9392ebb8d00a9a1b5b139d208f2bd3d5a303fe4b485614dc54fe4252845f045ff7195b4e278b60b36bfa4a9ee9d29c1428d1420d75f61d55f98a3cdfc0795cc519e438e1757f3b0b50391dc3a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) setsockopt$sock_attach_bpf(r0, 0x29, 0x2d, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x80, 0x0, 0x0, 0x7, 0x90400, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff000000000000000901000000020000000000000802000000000061"], 0x0, 0x44}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000600), 0x4) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x7) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000300), 0x9) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) 208.627966ms ago: executing program 0 (id=3459): r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000080)=""/50, 0x32}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x3, &(0x7f0000000200)=""/67, 0x43}, 0x40000020) (async) sendmsg$sock(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="228158a09d0f9e455c", 0x9}, {&(0x7f0000000300)="bdab1817bba241d1a6f7e800dac6eacc8d259666318a0044e570b5c5ddf414c408d7f50d18290897570d51d287598185b32c14d4e61bcf8feae32ff8e4d1c27e1975f6377af2cfe8467a164572f3bd8b33b07f6410edffaf33e92696fd7c9f81ff6c8cd4e0bf16803ea860453ae6f6ff1c5daafd88f15b64413f8ee3b1d17fb748af3b1acbec6d73ea2cbeaa0f236e95ebce058ac27c8c1a3731dc580b3d98ee22", 0xa1}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="f573b6dbedebe9e2133076d48644aa23e5a8df8dea6dad757ef1bd3bf30f4a", 0x1f}, {&(0x7f0000001400)="fe8956fc4608fdf224ffd2fd3d167bbc3e918739bb0e3584c1", 0x19}], 0x5, &(0x7f00000014c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200000000}}], 0x60}, 0x4040) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001580)={r0}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x50, 0x2e, &(0x7f00000015c0)="6552e5feb1e2c44716620e1a1270c53f69411b5c59af98b0454255546addff41e72561c95b3bcaad15130c911b00187a52a554c87ab6bda88b0fdb80d3f872085ce212def9d83a3630698318263406ca", &(0x7f0000001640)=""/46, 0x6, 0x0, 0x4e, 0x18, &(0x7f0000001680)="f9fb38c88744eaf0e2a55cb985df048279b71217243ca91a5f02d997bb5dffa1ab040c2680334e3935d4f0c2f98afdaca6ed699bc621101e994a404585d49ff72f3e9a153d7751f0146213b62262", &(0x7f0000001700)="79bf30326c069d7b569c44e51ef6e2b20ddabcaceb778120", 0x4, 0x0, 0x9}, 0x50) r1 = perf_event_open(&(0x7f00000018c0)={0x5, 0x80, 0x9, 0xf, 0xff, 0x80, 0x0, 0x3, 0x40800, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x1, @perf_bp={&(0x7f0000001880), 0x3}, 0x2000, 0xffffffffffffffff, 0x332, 0x7, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x12) r2 = perf_event_open(&(0x7f0000001800)={0x5, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x84ee, 0x90580, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf7ad, 0x4, @perf_bp={&(0x7f00000017c0), 0x6}, 0x8080, 0x8, 0x2, 0x4, 0x2, 0xa, 0x0, 0x0, 0x6, 0x0, 0x498d}, 0xffffffffffffffff, 0xa, r1, 0x2) (async) r3 = getpid() perf_event_open(&(0x7f0000001940)={0x0, 0x80, 0x8, 0xf, 0x5, 0x4, 0x0, 0xa8, 0x19840, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_config_ext={0x1, 0x8}, 0x1008, 0x3, 0x1e, 0x0, 0x1, 0xfffffff4, 0x1ff, 0x0, 0x81, 0x0, 0x2}, r3, 0x1, r2, 0xa) (async) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000019c0)={r4}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001ac0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001b00)=[0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001c00), &(0x7f0000001c40), 0x8, 0x92, 0x8, 0x8, &(0x7f0000001c80)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0xc, [{0x8, 0x9, 0x4}]}]}, {0x0, [0x0]}}, &(0x7f0000001e40)=""/118, 0x33, 0x76, 0x1, 0x2, 0x10000}, 0x28) (async) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001fc0)=@o_path={&(0x7f0000001f80)='./file0\x00', 0x0, 0x4000, r4}, 0x18) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000020c0)=@o_path={&(0x7f0000002080)='./file0\x00', 0x0, 0x4000, r4}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x7, 0x7, &(0x7f0000001a40)=@raw=[@generic={0xd, 0x1, 0x4, 0x100, 0x1ce9d730}, @alu={0x7, 0x1, 0xc, 0x1, 0x4, 0x18, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000001a80)='syzkaller\x00', 0x373, 0x0, 0x0, 0x41000, 0x4, '\x00', r8, @fallback=0x3, r9, 0x8, &(0x7f0000001f00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001f40)={0x0, 0x4, 0x9, 0x4}, 0x10, 0xffffffffffffffff, r10, 0x8, &(0x7f0000002100)=[r11, 0xffffffffffffffff, r0, r12], &(0x7f0000002140)=[{0x3, 0x3, 0x6, 0x3}, {0x5, 0x5, 0x4, 0x9}, {0x4, 0x4, 0x6, 0x8}, {0x1, 0x3, 0xa, 0xd}, {0x0, 0x8, 0x5, 0x7}, {0x3, 0x5, 0xb, 0x9}, {0x3, 0x2, 0xa}, {0x4, 0x5, 0x5, 0x7}], 0x10, 0x8}, 0x94) (async) recvmsg(r5, &(0x7f00000037c0)={&(0x7f0000002280)=@nfc, 0x80, &(0x7f0000002740)=[{&(0x7f0000002300)=""/35, 0x23}, {&(0x7f0000002340)=""/250, 0xfa}, {&(0x7f0000002440)=""/243, 0xf3}, {&(0x7f0000002540)=""/133, 0x85}, {&(0x7f0000002600)=""/142, 0x8e}, {&(0x7f00000026c0)=""/6, 0x6}, {&(0x7f0000002700)=""/9, 0x9}], 0x7, &(0x7f00000027c0)=""/4096, 0x1000}, 0x40) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000039c0)={0x6, 0x5, &(0x7f0000003800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x0, 0x0, 0x10}, [@alu={0x4, 0x0, 0x1, 0x8, 0x3, 0x50, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000003840)='syzkaller\x00', 0x0, 0x13, &(0x7f0000003880)=""/19, 0x40f00, 0x10, '\x00', 0x0, @xdp=0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000038c0)={0x2, 0x10, 0x7cc4, 0x80000000}, 0x10, 0x0, r10, 0x7, &(0x7f0000003900)=[r12, r6, r6, r12], &(0x7f0000003940)=[{0x1, 0x3, 0x9, 0xa}, {0x5, 0x4, 0xf, 0x4}, {0x0, 0x2, 0xa, 0x6}, {0x2, 0x5, 0x2}, {0x1, 0x4, 0x4, 0x5}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x1, 0xd, 0x9}], 0x10, 0x4}, 0x94) (async) perf_event_open(&(0x7f0000003a80)={0x0, 0x80, 0xa, 0x80, 0x7, 0x2a, 0x0, 0xffffffffffffffff, 0x4310, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1d5, 0x0, @perf_config_ext={0xa}, 0x1000, 0x8001, 0xa, 0x8, 0xfffffffffffffbff, 0x10, 0x4, 0x0, 0x81, 0x0, 0x1}, 0xffffffffffffffff, 0xb, r2, 0xc) (async) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003b00)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r11, 0x6, '\x00', r8, r9, 0x4, 0x3, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003c80)={@cgroup, 0x4, 0x0, 0x1, &(0x7f0000003b80)=[0x0], 0x1, 0x0, &(0x7f0000003bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003c40)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003cc0)={@cgroup=r17, r14, 0x8, 0x1, r10, @void, @value=r13, @void, @void, r16}, 0x20) (async) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000003d40), 0x460081, 0x0) ioctl$SIOCSIFHWADDR(r18, 0x8924, &(0x7f0000003d80)={'tunl0\x00', @local}) (async) recvmsg(r5, &(0x7f00000051c0)={&(0x7f0000003dc0)=@caif=@dgm, 0x80, &(0x7f0000004140)=[{&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/25, 0x19}, {&(0x7f0000003ec0)=""/67, 0x43}, {&(0x7f0000003f40)=""/54, 0x36}, {&(0x7f0000003f80)=""/26, 0x1a}, {&(0x7f0000003fc0)=""/207, 0xcf}, {&(0x7f00000040c0)=""/89, 0x59}], 0x7, &(0x7f00000041c0)=""/4096, 0x1000}, 0x1) (async) r19 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005440)={0x11, 0x5, &(0x7f0000005200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000005240)='syzkaller\x00', 0x5, 0x96, &(0x7f0000005280)=""/150, 0x41000, 0x90, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000005340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000005380)={0x2, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000053c0)=[r15, r12, r15], &(0x7f0000005400)=[{0x1, 0x2, 0x6, 0x5}, {0x1, 0x3, 0x5}], 0x10, 0x1a}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005500)={@map=r12, r14, 0x17, 0x20, r19, @void, @void, @void, @value=r7, r16}, 0x20) 188.799726ms ago: executing program 1 (id=3460): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4001, 0x400, 0x98, 0x5, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2c, 0x3, 0x0) socketpair(0x3, 0x800, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) 35.307797ms ago: executing program 0 (id=3461): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x3, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x73, 0x0, 0x4f}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0xb, 0x3}, {0x0, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {0x6}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x32}, @enum64={0x1, 0xa, 0x0, 0x13, 0x0, 0x4, [{0x3, 0x9, 0x3}, {0xc, 0xfb3, 0x4}, {0xc, 0x10001, 0x6}, {0x1, 0x10, 0x8000}, {0xa, 0x4ee, 0x6}, {0x8, 0xee, 0x1}, {0x6, 0x6cdaa7ad, 0x697}, {0x5, 0x3, 0x7f}, {0x1, 0x1, 0xfffffff6}, {0xc, 0xffff, 0x4}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/154, 0x12b, 0x9a, 0x1, 0x1}, 0x28) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18.408138ms ago: executing program 3 (id=3462): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 0s ago: executing program 1 (id=3463): bpf$MAP_CREATE(0x180, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x73, 0x870, 0x94a, 0x4, r2, 0x1, '\x00', r3, r4, 0x4, 0x2, 0x0, 0x6}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 50 [ 477.729615][T12828] ? import_iovec+0x73/0xa0 [ 477.734190][T12828] ___sys_sendmsg+0x2a6/0x360 [ 477.738880][T12828] ? __lock_acquire+0x7d40/0x7d40 [ 477.743926][T12828] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.748746][T12828] __se_sys_sendmsg+0x1c2/0x2b0 [ 477.753613][T12828] ? __x64_sys_sendmsg+0x80/0x80 [ 477.758579][T12828] ? lockdep_hardirqs_on+0x98/0x150 [ 477.763807][T12828] do_syscall_64+0x55/0xa0 [ 477.768343][T12828] ? clear_bhb_loop+0x40/0x90 [ 477.773055][T12828] ? clear_bhb_loop+0x40/0x90 [ 477.777776][T12828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.783688][T12828] RIP: 0033:0x7f602779c819 [ 477.788124][T12828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.807947][T12828] RSP: 002b:00007f60285bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.816384][T12828] RAX: ffffffffffffffda RBX: 00007f6027a16180 RCX: 00007f602779c819 [ 477.824452][T12828] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 477.832442][T12828] RBP: 00007f6027832c91 R08: 0000000000000000 R09: 0000000000000000 [ 477.840422][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.848491][T12828] R13: 00007f6027a16218 R14: 00007f6027a16180 R15: 00007ffff9062068 [ 477.857552][T12828] [ 477.897023][T12827] netlink: 'syz.2.1822': attribute type 4 has an invalid length. [ 478.333576][T12837] netlink: 'syz.1.1825': attribute type 27 has an invalid length. [ 478.341929][T12837] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1825'. [ 478.539331][T12839] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1826'. [ 478.899818][T12843] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1827'. [ 479.240402][ T40] wlan1: Trigger new scan to find an IBSS to join [ 479.255817][T12853] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1831'. [ 479.652929][T12868] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1835'. [ 479.827338][T12864] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 479.882874][T12864] .`: (slave netdevsim0): Releasing backup interface [ 480.398202][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 480.464212][T12889] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1840'. [ 480.512311][T12889] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 481.364938][T12901] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1843'. [ 481.518642][T12907] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1844'. [ 481.837327][T12911] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1845'. [ 482.202265][ T6030] wlan1: Trigger new scan to find an IBSS to join [ 483.197529][T12950] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1856'. [ 483.303115][ T6036] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 483.409069][T12954] netlink: 'syz.3.1857': attribute type 30 has an invalid length. [ 484.357885][ T5775] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 484.364098][ T5775] Bluetooth: hci1: command 0x206a tx timeout [ 484.439016][T12978] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1863'. [ 484.717582][T12981] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1864'. [ 484.749929][T12981] veth0_to_bond: entered promiscuous mode [ 486.592693][T13011] can: request_module (can-proto-0) failed. [ 486.743270][T13016] netlink: 'syz.1.1872': attribute type 21 has an invalid length. [ 486.770966][T13016] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1872'. [ 487.527864][T13026] netlink: 'syz.0.1875': attribute type 2 has an invalid length. [ 487.566536][T13026] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1875'. [ 487.656786][T13033] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1877'. [ 487.762572][T13035] netlink: 'syz.1.1878': attribute type 2 has an invalid length. [ 487.781682][T13035] netlink: 'syz.1.1878': attribute type 8 has an invalid length. [ 487.797836][T13035] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1878'. [ 488.022148][T13039] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 488.073931][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1880'. [ 488.324163][T13050] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1882'. [ 488.371610][T13050] veth0_to_bond: entered promiscuous mode [ 489.295373][T13078] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1893'. [ 490.182403][T13097] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 490.601266][T13097] team0: Device wg1 is of different type [ 491.051751][T13119] netlink: 'syz.3.1906': attribute type 2 has an invalid length. [ 491.059994][T13119] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1906'. [ 491.190418][T13124] netlink: 'syz.3.1908': attribute type 39 has an invalid length. [ 491.283200][T13123] netlink: 'syz.3.1908': attribute type 39 has an invalid length. [ 491.306594][T13121] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1907'. [ 491.492328][T13137] netlink: 'syz.0.1911': attribute type 10 has an invalid length. [ 491.701747][T13139] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 491.718466][T13139] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1912'. [ 491.935417][T13147] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1913'. [ 492.147797][T13147] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1913'. [ 492.202326][T13147] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1913'. [ 492.211282][T13151] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1913'. [ 492.231427][T13147] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 492.244641][T13152] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1913'. [ 493.307229][T13186] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1923'. [ 493.342103][T13186] netlink: del zone limit has 8 unknown bytes [ 494.143200][T13199] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 494.167728][T13199] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1926'. [ 496.230220][T13231] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 498.395874][T13241] netlink: 'syz.3.1936': attribute type 2 has an invalid length. [ 498.441997][T13241] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 498.506759][T13241] __nla_validate_parse: 2 callbacks suppressed [ 498.506789][T13241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1936'. [ 499.002668][T13247] netlink: 'syz.1.1937': attribute type 10 has an invalid length. [ 499.588558][T13258] netlink: 'syz.3.1941': attribute type 29 has an invalid length. [ 500.132898][T13247] syz.1.1937 (13247) used greatest stack depth: 18792 bytes left [ 500.322108][T13258] netlink: 'syz.3.1941': attribute type 29 has an invalid length. [ 500.503694][ T5775] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 501.144531][ T5775] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 501.314956][T13306] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1952'. [ 501.325921][T13306] openvswitch: netlink: Duplicate key (type 0). [ 501.500981][T13299] netlink: 'syz.3.1952': attribute type 21 has an invalid length. [ 501.521497][T13299] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1952'. [ 501.546664][T13304] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1951'. [ 501.804627][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.811216][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.900746][T13346] netlink: 'syz.2.1962': attribute type 12 has an invalid length. [ 503.917774][T13346] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1962'. [ 503.970438][T13346] netlink: 'syz.2.1962': attribute type 12 has an invalid length. [ 503.999340][T13346] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1962'. [ 504.037216][T13344] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 504.053390][T13344] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 504.095829][T13355] netlink: 'syz.1.1963': attribute type 10 has an invalid length. [ 504.116323][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 504.141536][T13355] netlink: 'syz.1.1963': attribute type 10 has an invalid length. [ 504.152591][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 504.162757][T13354] netlink: 'syz.1.1963': attribute type 10 has an invalid length. [ 504.177417][T13354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 504.426222][T13361] netlink: 'syz.2.1966': attribute type 1 has an invalid length. [ 504.434502][T13361] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1966'. [ 504.642904][T13367] netlink: 'syz.2.1968': attribute type 10 has an invalid length. [ 504.665983][T13367] veth0_macvtap: left promiscuous mode [ 505.737542][T13380] netlink: 'syz.2.1971': attribute type 3 has an invalid length. [ 505.792438][T13380] netlink: 'syz.2.1971': attribute type 1 has an invalid length. [ 506.316527][T13394] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1975'. [ 507.525645][T13392] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1974'. [ 507.561993][ T6036] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 508.048582][T13441] validate_nla: 1 callbacks suppressed [ 508.048600][T13441] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 508.072451][T13441] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1986'. [ 511.651638][T13450] netlink: 'syz.1.1985': attribute type 3 has an invalid length. [ 511.659778][T13450] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1985'. [ 511.670111][T13451] netlink: 'syz.1.1985': attribute type 12 has an invalid length. [ 511.680259][T13451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1985'. [ 512.033945][T13471] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1990'. [ 512.079141][T13471] netlink: get zone limit has 4 unknown bytes [ 512.292009][T13473] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1992'. [ 512.322204][T13473] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 512.690374][T13481] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1994'. [ 514.325925][T13518] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2004'. [ 514.622836][T13532] netlink: 'syz.3.2008': attribute type 16 has an invalid length. [ 514.643428][T13532] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2008'. [ 515.241528][ T6030] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 515.518961][T13542] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 515.560330][T13542] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2010'. [ 515.583292][T13553] netlink: 'syz.1.2013': attribute type 10 has an invalid length. [ 515.701152][T13553] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 515.714287][T13553] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 516.104914][T13561] netlink: 'syz.2.2017': attribute type 10 has an invalid length. [ 517.612387][T13585] netlink: 'syz.3.2022': attribute type 10 has an invalid length. [ 517.644341][T13585] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2022'. [ 517.699002][T13585] hsr0: entered promiscuous mode [ 517.798265][T13585] bridge0: port 3(hsr0) entered blocking state [ 517.837237][T13585] bridge0: port 3(hsr0) entered disabled state [ 517.860801][T13585] hsr0: entered allmulticast mode [ 517.866470][T13585] hsr_slave_0: entered allmulticast mode [ 517.909219][T13596] syz.2.2027[13596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.909475][T13596] syz.2.2027[13596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.910338][T13585] hsr_slave_1: entered allmulticast mode [ 517.963441][T13585] bridge0: port 3(hsr0) entered blocking state [ 517.969943][T13585] bridge0: port 3(hsr0) entered forwarding state [ 519.921052][T13624] netlink: 'syz.2.2035': attribute type 13 has an invalid length. [ 520.509060][T13648] netlink: 'syz.0.2043': attribute type 21 has an invalid length. [ 520.534905][T13648] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2043'. [ 520.553873][T13648] netlink: 'syz.0.2043': attribute type 5 has an invalid length. [ 520.567770][T13648] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2043'. [ 520.568303][T13649] netlink: 'syz.0.2043': attribute type 3 has an invalid length. [ 520.620172][T13649] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2043'. [ 523.031871][T13699] netlink: 'syz.0.2053': attribute type 10 has an invalid length. [ 523.075058][T13699] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.098224][T13699] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.137792][T13699] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.157500][T13699] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.749083][T13715] netlink: 'syz.0.2059': attribute type 2 has an invalid length. [ 523.749924][T13717] netlink: 'syz.2.2058': attribute type 21 has an invalid length. [ 523.756874][T13715] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2059'. [ 524.706141][T13753] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 524.971154][T13764] netlink: 'syz.2.2072': attribute type 6 has an invalid length. [ 525.038919][T13764] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2072'. [ 525.214546][T13770] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2074'. [ 525.847471][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 525.870256][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 525.886237][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 525.912942][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 525.929229][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 525.947852][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 525.972374][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 525.996005][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 526.013439][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 526.026171][T13776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 528.615811][T13780] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2078'. [ 529.071519][T13799] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2082'. [ 529.095983][T13792] netlink: 'syz.2.2080': attribute type 10 has an invalid length. [ 531.810421][T13807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 532.017328][T13811] @0Ù: renamed from bond_slave_1 (while UP) [ 532.161225][T13823] raw_sendmsg: syz.3.2087 forgot to set AF_INET. Fix it! [ 532.586267][ T5775] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 532.801955][T13838] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2092'. [ 533.266020][T13854] syzkaller0: entered allmulticast mode [ 533.890969][T13863] netlink: 'syz.1.2100': attribute type 17 has an invalid length. [ 533.899203][T13863] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2100'. [ 534.057051][T13868] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.2103'. [ 535.107750][T13890] netlink: 'syz.1.2108': attribute type 21 has an invalid length. [ 535.417701][T13903] netlink: 'syz.1.2113': attribute type 10 has an invalid length. [ 536.191193][T13921] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2118'. [ 536.297925][T13901] netlink: 'syz.0.2109': attribute type 4 has an invalid length. [ 536.324121][T13901] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2109'. [ 539.174261][T13972] netlink: 'syz.1.2131': attribute type 29 has an invalid length. [ 539.228882][T13972] netlink: 'syz.1.2131': attribute type 29 has an invalid length. [ 539.327798][T13976] netlink: 'syz.0.2129': attribute type 10 has an invalid length. [ 539.366631][T13976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.431866][T13976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.461625][T13976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.471374][T13976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.486352][T13976] team0: Port device geneve1 added [ 540.529786][T14000] sctp: [Deprecated]: syz.1.2136 (pid 14000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.529786][T14000] Use struct sctp_sack_info instead [ 541.477879][ T6031] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.812171][T14043] veth1_to_bond: entered promiscuous mode [ 542.851441][T14043] veth1_to_bond: entered allmulticast mode [ 543.301990][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'. [ 545.199978][T14074] netlink: 'syz.2.2154': attribute type 33 has an invalid length. [ 545.227758][T14074] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2154'. [ 545.992745][T14080] bridge_slave_1: left allmulticast mode [ 546.009915][T14080] bridge_slave_1: left promiscuous mode [ 546.017773][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.066318][T14080] bridge_slave_0: left promiscuous mode [ 546.075348][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.294286][T14080] .`: (slave bridge0): Releasing backup interface [ 546.657705][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2155'. [ 547.248635][ T6031] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 547.836099][T14093] netlink: 'syz.3.2157': attribute type 10 has an invalid length. [ 548.076842][T14105] syz.1.2161[14105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.077002][T14105] syz.1.2161[14105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.151139][T14107] netlink: 'syz.2.2162': attribute type 13 has an invalid length. [ 548.202074][T14111] netlink: 'syz.0.2164': attribute type 4 has an invalid length. [ 548.210418][T14111] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2164'. [ 549.054167][T14124] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2175'. [ 549.073528][T14124] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2175'. [ 549.326948][T14128] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 549.372066][T14128] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 549.445321][T14133] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 549.481108][T14143] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2171'. [ 549.534242][T14143] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2171'. [ 549.552997][T14144] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2171'. [ 549.573243][T14143] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2171'. [ 552.086040][T14209] netlink: 'syz.2.2190': attribute type 4 has an invalid length. [ 552.116171][T14209] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2190'. [ 552.222460][T14209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2190'. [ 552.228366][T14212] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2191'. [ 552.293678][T14209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2190'. [ 553.080543][T14243] netlink: 'syz.0.2201': attribute type 10 has an invalid length. [ 553.098244][T14243] net_ratelimit: 310 callbacks suppressed [ 553.098263][T14243] openvswitch: netlink: Flow key attr not present in new flow. [ 557.444611][T14319] netlink: 'syz.1.2222': attribute type 6 has an invalid length. [ 557.456264][T14319] __nla_validate_parse: 1 callbacks suppressed [ 557.456283][T14319] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2222'. [ 558.028897][T14326] netlink: 'syz.1.2224': attribute type 13 has an invalid length. [ 558.057912][T14326] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2224'. [ 558.093555][T14326] erspan0: refused to change device tx_queue_len [ 558.125629][T14326] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 558.285885][T14335] netlink: 'syz.0.2228': attribute type 21 has an invalid length. [ 558.319030][T14335] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2228'. [ 558.702631][T14344] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2230'. [ 559.679175][T14362] netlink: 'syz.3.2234': attribute type 21 has an invalid length. [ 559.702984][T14362] netlink: 'syz.3.2234': attribute type 4 has an invalid length. [ 559.723056][T14362] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2234'. [ 560.129130][T14356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.533052][T14399] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2244'. [ 561.742458][T14393] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2242'. [ 561.800288][T14390] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2242'. [ 563.245916][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.252653][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.474878][T14441] netlink: 'syz.0.2254': attribute type 1 has an invalid length. [ 563.507814][T14441] netlink: 'syz.0.2254': attribute type 3 has an invalid length. [ 563.515655][T14441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2254'. [ 565.067062][T14463] netlink: 'syz.3.2259': attribute type 3 has an invalid length. [ 565.127634][T14463] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 565.171509][T14461] netlink: 'syz.1.2258': attribute type 39 has an invalid length. [ 565.180939][T14463] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.2259'. [ 565.939453][T14484] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 565.947374][T14484] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2266'. [ 567.311774][T14495] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 567.470139][T14495] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 568.457177][T14518] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.476494][T14518] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.489621][T14518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.500850][T14518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.518568][T14518] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 568.528049][T14518] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.225322][T14515] chnl_net:caif_netlink_parms(): no params data found [ 569.506216][ T6010] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.604024][T14548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2279'. [ 569.747504][T14515] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.757774][T14515] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.765091][T14515] bridge_slave_0: entered allmulticast mode [ 569.828050][T14515] bridge_slave_0: entered promiscuous mode [ 569.860771][T14515] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.887819][T14515] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.895288][T14515] bridge_slave_1: entered allmulticast mode [ 569.930109][T14515] bridge_slave_1: entered promiscuous mode [ 570.004345][ T6010] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.180904][T14551] netlink: 'syz.0.2280': attribute type 10 has an invalid length. [ 570.223044][T14551] team0: Port device dummy0 added [ 570.526929][ T6010] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.793770][T14556] syzkaller0: entered promiscuous mode [ 570.810820][T14556] syzkaller0: entered allmulticast mode [ 570.846592][ T6010] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.895251][T14515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.998132][T14518] Bluetooth: hci4: command tx timeout [ 571.120887][T14569] netlink: 'syz.2.2284': attribute type 9 has an invalid length. [ 571.132967][T14569] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2284'. [ 573.076101][T14515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.089213][T14518] Bluetooth: hci4: command tx timeout [ 573.203814][T14515] team0: Port device team_slave_0 added [ 573.223013][T14515] team0: Port device team_slave_1 added [ 573.413596][T14515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.451803][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.485314][T14515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.527731][T14515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.534743][T14515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.572157][T14515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.664188][T14585] netlink: 'syz.2.2286': attribute type 9 has an invalid length. [ 573.685540][T14585] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2286'. [ 573.931067][ T6010] ip6gretap0 (unregistering): left allmulticast mode [ 573.950488][ T6010] ip6gretap0 (unregistering): left promiscuous mode [ 573.962730][ T6010] Ÿë: port 1(ip6gretap0) entered disabled state [ 574.038909][T14515] hsr_slave_0: entered promiscuous mode [ 574.046324][T14515] hsr_slave_1: entered promiscuous mode [ 574.061092][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 574.132453][T14599] netlink: 'syz.3.2289': attribute type 29 has an invalid length. [ 574.219444][T14593] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2289'. [ 574.277100][T14593] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2289'. [ 574.357019][T14599] netlink: 'syz.3.2289': attribute type 29 has an invalid length. [ 575.158751][T14518] Bluetooth: hci4: command tx timeout [ 575.988431][T14515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 576.055557][T14515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 576.131515][T14515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 576.385620][T14641] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.469373][T14641] syzkaller0: entered promiscuous mode [ 576.485365][T14641] syzkaller0: entered allmulticast mode [ 576.536602][T14515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 576.640993][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2298'. [ 577.239954][T14518] Bluetooth: hci4: command tx timeout [ 578.493923][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2298'. [ 578.600030][ T6030] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.086794][T14682] netlink: 'syz.3.2303': attribute type 21 has an invalid length. [ 580.124384][T14682] netlink: 'syz.3.2303': attribute type 30 has an invalid length. [ 580.136949][T14515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.241766][T14515] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.411223][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.418519][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.462679][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.470002][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.659028][ T6010] bridge_slave_1: left allmulticast mode [ 580.664952][ T6010] bridge_slave_1: left promiscuous mode [ 580.718735][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.755586][ T6010] bridge_slave_0: left allmulticast mode [ 580.763570][ T6010] bridge_slave_0: left promiscuous mode [ 580.778240][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.848471][ T6010] veth0_macvtap: left promiscuous mode [ 580.854183][ T6010] veth1_vlan: left promiscuous mode [ 583.748968][T14723] netlink: 'syz.0.2311': attribute type 11 has an invalid length. [ 583.757037][T14723] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2311'. [ 583.777825][T14731] netlink: 'syz.3.2315': attribute type 10 has an invalid length. [ 583.808446][T14731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2315'. [ 584.306370][T14743] netlink: 'syz.3.2318': attribute type 4 has an invalid length. [ 584.537392][T14515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.636308][T14515] veth0_vlan: entered promiscuous mode [ 584.667433][T14515] veth1_vlan: entered promiscuous mode [ 584.750296][T14515] veth0_macvtap: entered promiscuous mode [ 584.773319][T14515] veth1_macvtap: entered promiscuous mode [ 584.805165][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.816155][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.832009][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.844930][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.859848][T14515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.879134][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.897438][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.913860][T14515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.926431][T14515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.945548][T14515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.969378][T14515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.989564][T14515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.008935][T14515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.018488][T14515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.469786][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.505487][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.610833][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.645552][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.482257][T14773] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2327'. [ 586.885356][T14785] netlink: 'syz.3.2331': attribute type 2 has an invalid length. [ 586.902807][T14785] netlink: 'syz.3.2331': attribute type 8 has an invalid length. [ 586.928147][T14785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2331'. [ 587.376978][T14806] netlink: 'syz.3.2336': attribute type 1 has an invalid length. [ 587.386856][T14806] netlink: 'syz.3.2336': attribute type 2 has an invalid length. [ 587.395664][T14806] netlink: 'syz.3.2336': attribute type 2 has an invalid length. [ 587.413213][T14806] netlink: 'syz.3.2336': attribute type 3 has an invalid length. [ 587.423751][T14806] netlink: 'syz.3.2336': attribute type 4 has an invalid length. [ 587.447887][T14806] netlink: 'syz.3.2336': attribute type 5 has an invalid length. [ 587.455659][T14810] netlink: 'syz.1.2338': attribute type 8 has an invalid length. [ 587.463676][T14810] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2338'. [ 587.475392][T14806] netlink: 'syz.3.2336': attribute type 6 has an invalid length. [ 587.487371][T14806] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.2336'. [ 590.094974][T14876] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2359'. [ 591.136047][T14885] mac80211_hwsim hwsim21 ..ãc¤±: renamed from wlan1 (while UP) [ 591.551454][T14900] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2364'. [ 591.931548][T14911] netlink: 49284 bytes leftover after parsing attributes in process `syz.3.2367'. [ 592.539494][T14926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2371'. [ 593.736532][T14955] validate_nla: 7 callbacks suppressed [ 593.736565][T14955] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 594.806362][T14980] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2385'. [ 595.024121][T14981] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 595.213479][T14984] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2384'. [ 595.272597][T14984] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2384'. [ 595.394190][T14984] tipc: Started in network mode [ 595.427614][T14984] tipc: Node identity b, cluster identity 73 [ 595.433778][T14984] tipc: Node number set to 11 [ 595.745061][T14999] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2391'. [ 596.384181][T15024] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 597.200133][T15039] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2401'. [ 597.408801][T15050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.467720][T15050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.541886][T15050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.667640][T15050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.631985][T15065] sock: sock_timestamping_bind_phc: sock not bind to device [ 605.413181][T15116] netlink: 'syz.3.2419': attribute type 10 has an invalid length. [ 605.811312][T15190] netlink: 'syz.2.2429': attribute type 13 has an invalid length. [ 605.819421][T15190] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2429'. [ 606.246879][T15198] veth1_macvtap: left promiscuous mode [ 606.268025][T15198] macsec0: entered allmulticast mode [ 606.537627][T15215] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2436'. [ 606.624119][T15211] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2434'. [ 606.872096][T15220] netlink: 'syz.0.2438': attribute type 10 has an invalid length. [ 606.881761][T15220] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2438'. [ 607.120024][T15227] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2440'. [ 607.133792][T15227] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.2440'. [ 607.144659][T15227] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2440'. [ 608.391218][T15255] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 608.426553][T15255] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2444'. [ 609.086478][T15268] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2450'. [ 609.375632][T15270] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2451'. [ 609.711900][T15280] Q±6ã`Ò˜: renamed from lo (while UP) [ 610.201615][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 610.212234][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 610.220974][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 610.230257][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 610.241429][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 610.273833][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 610.605498][ T6032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 611.305959][T15318] pim6reg1: entered promiscuous mode [ 611.312645][T15318] pim6reg1: entered allmulticast mode [ 611.544765][T15327] netlink: 'syz.2.2465': attribute type 1 has an invalid length. [ 611.569745][T15327] __nla_validate_parse: 1 callbacks suppressed [ 611.569782][T15327] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2465'. [ 611.599105][T15327] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2465'. [ 611.861141][T15294] chnl_net:caif_netlink_parms(): no params data found [ 612.258997][T15294] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.266459][T15294] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.273891][T15294] bridge_slave_0: entered allmulticast mode [ 612.281675][T15294] bridge_slave_0: entered promiscuous mode [ 612.291906][T15294] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.303324][T15294] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.311346][T15294] bridge_slave_1: entered allmulticast mode [ 612.326124][T15294] bridge_slave_1: entered promiscuous mode [ 612.357773][ T5775] Bluetooth: hci0: command tx timeout [ 612.630838][T15294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.682518][T15359] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.2471'. [ 612.721487][T15294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.923482][T15294] team0: Port device team_slave_0 added [ 613.240542][T15294] team0: Port device team_slave_1 added [ 613.886336][T15294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.904132][T15294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.967618][T15294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.020077][T15294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.065147][T15294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.187403][T15294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.477978][T15393] Q±6ã`Ò˜: renamed from lo (while UP) [ 614.507667][ T5775] Bluetooth: hci0: command tx timeout [ 614.730379][T15294] hsr_slave_0: entered promiscuous mode [ 614.761607][T15294] hsr_slave_1: entered promiscuous mode [ 614.779816][T15294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.796033][T15294] Cannot create hsr debugfs directory [ 616.517848][ T5775] Bluetooth: hci0: command tx timeout [ 616.782099][ T6029] hsr_slave_0: left promiscuous mode [ 616.790384][ T6029] hsr_slave_1: left promiscuous mode [ 616.797015][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.805746][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.819407][ T6029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.826824][ T6029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.836460][ T6029] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 616.844085][ T6029] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 616.861482][ T6029] hsr0: left allmulticast mode [ 616.866408][ T6029] bridge0: port 3(hsr0) entered disabled state [ 616.874772][ T6029] bridge_slave_1: left allmulticast mode [ 616.880547][ T6029] bridge_slave_1: left promiscuous mode [ 616.886431][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.896248][ T6029] bridge_slave_0: left allmulticast mode [ 616.902043][ T6029] bridge_slave_0: left promiscuous mode [ 616.909101][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.511136][T15294] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 618.536754][T15294] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 618.572801][T15294] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 618.605009][ T5775] Bluetooth: hci0: command tx timeout [ 618.615813][T15294] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.828027][T15444] Q±6ã`Ò˜: renamed from lo (while UP) [ 619.323869][T15472] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2490'. [ 619.411173][T15294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.477408][T15294] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.563481][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.570727][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.630269][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.637667][ T5028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.412193][T15294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.591383][T15294] veth0_vlan: entered promiscuous mode [ 620.646938][T15294] veth1_vlan: entered promiscuous mode [ 620.755949][T15294] veth0_macvtap: entered promiscuous mode [ 620.806399][T15294] veth1_macvtap: entered promiscuous mode [ 620.865282][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.916879][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.949313][T15294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.970828][T15294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.007677][T15294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.038547][T15294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.142252][T15294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.177664][T15294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.187412][T15294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.196865][T15294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.223892][T15531] veth1_to_bond: entered allmulticast mode [ 621.932764][T15560] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2505'. [ 621.960349][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.999186][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.090343][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.107848][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.156369][T15591] mac80211_hwsim hwsim21 ..ãc¤±: left promiscuous mode [ 623.189558][T15591] mac80211_hwsim hwsim21 ..ãc¤±: left allmulticast mode [ 623.446089][T15585] netlink: 'syz.3.2512': attribute type 21 has an invalid length. [ 623.466916][T15585] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2512'. [ 623.483071][T15585] netlink: 'syz.3.2512': attribute type 4 has an invalid length. [ 623.501275][T15585] netlink: 'syz.3.2512': attribute type 5 has an invalid length. [ 623.544862][T15585] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2512'. [ 623.649827][T15585] netlink: 'syz.3.2512': attribute type 10 has an invalid length. [ 623.677245][T15585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2512'. [ 623.772169][T15585] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 623.798196][T15585] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.863050][T15585] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 624.217831][T15610] netlink: 'syz.2.2520': attribute type 10 has an invalid length. [ 624.225928][T15610] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2520'. [ 624.687037][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.693608][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.767192][T15623] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2525'. [ 625.048152][T15634] netlink: 'syz.1.2528': attribute type 15 has an invalid length. [ 625.061288][T15634] netlink: 'syz.1.2528': attribute type 7 has an invalid length. [ 625.323378][T15648] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2529'. [ 625.418952][ T5775] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 626.289594][T15660] syzkaller0: entered promiscuous mode [ 626.296472][T15660] syzkaller0: entered allmulticast mode [ 627.154770][T15686] netlink: 'syz.3.2541': attribute type 29 has an invalid length. [ 627.169816][T15686] netlink: 'syz.3.2541': attribute type 29 has an invalid length. [ 627.194942][T15679] netlink: 'syz.3.2541': attribute type 29 has an invalid length. [ 627.274165][T15690] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2545'. [ 627.398674][T15695] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2546'. [ 627.477645][T14518] Bluetooth: hci0: command tx timeout [ 627.713784][T15702] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2549'. [ 627.897084][T15704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2548'. [ 627.962246][T15704] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2548'. [ 628.044379][T15708] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2549'. [ 628.100955][T15713] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2552'. [ 628.433023][T15700] delete_channel: no stack [ 628.433713][T15720] team0: Device hsr_slave_0 failed to register rx_handler [ 628.810514][T15727] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2555'. [ 629.110570][T15738] validate_nla: 14 callbacks suppressed [ 629.110590][T15738] netlink: 'syz.3.2558': attribute type 10 has an invalid length. [ 629.136727][T15738] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 629.262300][T15738] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 630.645864][T15761] syzkaller0: entered promiscuous mode [ 630.825472][T15761] syzkaller0: entered allmulticast mode [ 630.995547][T15765] netlink: 'syz.2.2566': attribute type 9 has an invalid length. [ 631.017089][T15765] __nla_validate_parse: 1 callbacks suppressed [ 631.017109][T15765] netlink: 387 bytes leftover after parsing attributes in process `syz.2.2566'. [ 631.447331][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 631.467321][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 631.493895][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 631.530021][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 631.539053][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 631.571604][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.723004][T14518] Bluetooth: hci2: command tx timeout [ 633.950581][ T6032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.079694][ T6032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.142583][T15781] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2570'. [ 634.182517][ T6032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.391039][ T6032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.628360][T15768] chnl_net:caif_netlink_parms(): no params data found [ 634.793310][T15768] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.800901][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.834602][T15768] bridge_slave_0: entered allmulticast mode [ 634.843090][T15768] bridge_slave_0: entered promiscuous mode [ 634.874659][T15768] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.885458][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.893202][T15768] bridge_slave_1: entered allmulticast mode [ 634.910613][T15768] bridge_slave_1: entered promiscuous mode [ 635.062710][T15810] netlink: 'syz.3.2578': attribute type 10 has an invalid length. [ 635.132623][T15810] veth0_vlan: left promiscuous mode [ 635.163152][T15810] veth0_vlan: entered promiscuous mode [ 635.185494][T15810] team0: Device veth0_vlan failed to register rx_handler [ 635.358768][T15768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.393310][T15768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.797840][T14518] Bluetooth: hci2: command tx timeout [ 636.004825][T15768] team0: Port device team_slave_0 added [ 636.171774][T15768] team0: Port device team_slave_1 added [ 636.180458][T15820] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2580'. [ 636.184596][T15810] syz.3.2578 (15810) used greatest stack depth: 18728 bytes left [ 636.283465][T15831] netlink: 'syz.3.2581': attribute type 3 has an invalid length. [ 636.293609][T15831] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 636.304634][T15831] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2581'. [ 636.309009][T15768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.335659][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.395435][T15768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.490745][T15768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.498533][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.528329][T15832] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2581'. [ 636.562665][T15768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.591441][T15834] netlink: 'syz.2.2582': attribute type 10 has an invalid length. [ 636.975122][T15839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2583'. [ 637.745722][T15768] hsr_slave_0: entered promiscuous mode [ 637.768327][T15768] hsr_slave_1: entered promiscuous mode [ 637.801306][T15768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.817861][T15768] Cannot create hsr debugfs directory [ 637.877810][T14518] Bluetooth: hci2: command tx timeout [ 638.946944][T15872] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2591'. [ 638.973667][T15872] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 639.299314][T15884] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2592'. [ 639.961658][T14518] Bluetooth: hci2: command tx timeout [ 640.127739][T15884] Ù: renamed from bond_slave_1 (while UP) [ 640.700568][T15901] netlink: 151496 bytes leftover after parsing attributes in process `syz.1.2595'. [ 642.335925][T15768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 642.568476][T15768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.598215][ T6044] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 642.622169][T15768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.683243][T15768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 642.838589][T15949] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2603'. [ 642.957769][T15953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2604'. [ 643.178613][T15768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.195061][ T6032] bridge_slave_1: left allmulticast mode [ 643.201824][ T6032] bridge_slave_1: left promiscuous mode [ 643.212874][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.223072][ T6032] bridge_slave_0: left allmulticast mode [ 643.232904][ T6032] bridge_slave_0: left promiscuous mode [ 643.241539][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.274198][ T6032] veth0_macvtap: left promiscuous mode [ 643.593892][ T6032] team0 (unregistering): Port device geneve1 removed [ 643.937446][T15966] netlink: 'syz.1.2609': attribute type 2 has an invalid length. [ 643.946608][T15966] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2609'. [ 644.006476][T15966] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2609'. [ 644.060960][ T6032] team0 (unregistering): Port device team_slave_1 removed [ 644.913173][ T6032] team0 (unregistering): Port device dummy0 removed [ 645.119140][T15768] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.180933][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.188202][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.236206][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.243548][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.289948][T15976] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2612'. [ 645.308516][T15976] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 645.545663][T15985] netlink: 'syz.1.2615': attribute type 29 has an invalid length. [ 645.557276][T15985] netlink: 'syz.1.2615': attribute type 29 has an invalid length. [ 645.604497][T15984] netlink: 'syz.1.2615': attribute type 29 has an invalid length. [ 645.616961][T15984] netlink: 'syz.1.2615': attribute type 29 has an invalid length. [ 645.838536][T15768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.011301][T15768] veth0_vlan: entered promiscuous mode [ 646.039879][T15768] veth1_vlan: entered promiscuous mode [ 646.124011][T15768] veth0_macvtap: entered promiscuous mode [ 646.172561][T15768] veth1_macvtap: entered promiscuous mode [ 646.217322][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.246320][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.265086][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.276443][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.310311][T15768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.335376][T16002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2621'. [ 646.416275][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.444004][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.475999][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.501268][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.524209][T15768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.545545][T15768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.555663][T15768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.565968][T15768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.576443][T15768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.924181][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.954741][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.967076][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.001027][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.494998][T16030] netlink: 197236 bytes leftover after parsing attributes in process `syz.2.2628'. [ 648.587253][T16030] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 648.621050][T16030] CPU: 1 PID: 16030 Comm: syz.2.2628 Not tainted syzkaller #0 [ 648.628595][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.638722][T16030] Call Trace: [ 648.642126][T16030] [ 648.645095][T16030] dump_stack_lvl+0x18c/0x250 [ 648.649845][T16030] ? show_regs_print_info+0x20/0x20 [ 648.655112][T16030] ? load_image+0x420/0x420 [ 648.659733][T16030] sysfs_warn_dup+0x8e/0xa0 [ 648.664291][T16030] sysfs_do_create_link_sd+0xc0/0x110 [ 648.669799][T16030] device_add_class_symlinks+0x1cf/0x240 [ 648.675548][T16030] device_add+0x507/0xc20 [ 648.680056][T16030] wiphy_register+0x1dad/0x2ae0 [ 648.684968][T16030] ? cfg80211_event_work+0x40/0x40 [ 648.690110][T16030] ? minstrel_ht_alloc+0x88a/0x990 [ 648.695362][T16030] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 648.701504][T16030] ieee80211_register_hw+0x3464/0x4250 [ 648.707049][T16030] ? ieee80211_tasklet_handler+0x20/0x20 [ 648.712735][T16030] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 648.718964][T16030] ? __debug_object_init+0xec/0x450 [ 648.724217][T16030] ? __asan_memset+0x22/0x40 [ 648.728851][T16030] ? __hrtimer_init+0x186/0x270 [ 648.733743][T16030] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 648.739545][T16030] ? mac80211_hwsim_free+0x220/0x220 [ 648.744871][T16030] ? rcu_is_watching+0x15/0xb0 [ 648.749676][T16030] ? kstrndup+0xbd/0x140 [ 648.754053][T16030] hwsim_new_radio_nl+0xdc9/0x1a90 [ 648.759191][T16030] ? __nla_validate+0x50/0x50 [ 648.763895][T16030] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 648.770253][T16030] ? __nla_parse+0x40/0x50 [ 648.775040][T16030] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 648.781406][T16030] genl_family_rcv_msg_doit+0x211/0x310 [ 648.786967][T16030] ? end_current_label_crit_section+0x170/0x170 [ 648.793234][T16030] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 648.799167][T16030] ? bpf_lsm_capable+0x9/0x10 [ 648.803870][T16030] ? security_capable+0x89/0xb0 [ 648.808924][T16030] genl_rcv_msg+0x619/0x7a0 [ 648.813447][T16030] ? genl_bind+0x360/0x360 [ 648.817874][T16030] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 648.824219][T16030] ? ref_tracker_free+0x690/0x840 [ 648.829267][T16030] netlink_rcv_skb+0x241/0x4d0 [ 648.834059][T16030] ? genl_bind+0x360/0x360 [ 648.838493][T16030] ? netlink_ack+0x1180/0x1180 [ 648.843288][T16030] ? __lock_acquire+0x7d40/0x7d40 [ 648.848338][T16030] ? down_read+0x1ac/0x2e0 [ 648.852806][T16030] genl_rcv+0x28/0x40 [ 648.856805][T16030] netlink_unicast+0x751/0x8d0 [ 648.861602][T16030] netlink_sendmsg+0x8d0/0xbf0 [ 648.866404][T16030] ? netlink_getsockopt+0x590/0x590 [ 648.871635][T16030] ? aa_sock_msg_perm+0x94/0x150 [ 648.876591][T16030] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 648.882068][T16030] ? security_socket_sendmsg+0x80/0xa0 [ 648.887541][T16030] ? netlink_getsockopt+0x590/0x590 [ 648.892847][T16030] ____sys_sendmsg+0x5ba/0x960 [ 648.897632][T16030] ? __asan_memset+0x22/0x40 [ 648.902243][T16030] ? __sys_sendmsg_sock+0x30/0x30 [ 648.907287][T16030] ? __import_iovec+0x5f2/0x850 [ 648.912184][T16030] ? import_iovec+0x73/0xa0 [ 648.916825][T16030] ___sys_sendmsg+0x2a6/0x360 [ 648.921709][T16030] ? __sys_sendmsg+0x2a0/0x2a0 [ 648.926536][T16030] __se_sys_sendmsg+0x1c2/0x2b0 [ 648.931406][T16030] ? __x64_sys_sendmsg+0x80/0x80 [ 648.936470][T16030] ? lockdep_hardirqs_on+0x98/0x150 [ 648.941689][T16030] do_syscall_64+0x55/0xa0 [ 648.946119][T16030] ? clear_bhb_loop+0x40/0x90 [ 648.950819][T16030] ? clear_bhb_loop+0x40/0x90 [ 648.955516][T16030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.961437][T16030] RIP: 0033:0x7f602779c819 [ 648.965878][T16030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.985499][T16030] RSP: 002b:00007f6028601028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.993928][T16030] RAX: ffffffffffffffda RBX: 00007f6027a15fa0 RCX: 00007f602779c819 [ 649.001923][T16030] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 649.009923][T16030] RBP: 00007f6027832c91 R08: 0000000000000000 R09: 0000000000000000 [ 649.017926][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.025925][T16030] R13: 00007f6027a16038 R14: 00007f6027a15fa0 R15: 00007ffff9062068 [ 649.034020][T16030] [ 649.888848][T16073] netlink: 'syz.2.2637': attribute type 11 has an invalid length. [ 649.897685][T16073] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2637'. [ 650.030719][T16073] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 650.132219][T16076] netlink: 'syz.0.2638': attribute type 16 has an invalid length. [ 650.173708][T16079] netlink: 'syz.1.2639': attribute type 27 has an invalid length. [ 650.182070][T16073] CPU: 0 PID: 16073 Comm: syz.2.2637 Not tainted syzkaller #0 [ 650.189662][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.199993][T16073] Call Trace: [ 650.203282][T16073] [ 650.206226][T16073] dump_stack_lvl+0x18c/0x250 [ 650.210935][T16073] ? show_regs_print_info+0x20/0x20 [ 650.216164][T16073] ? load_image+0x420/0x420 [ 650.220713][T16073] sysfs_warn_dup+0x8e/0xa0 [ 650.225748][T16073] sysfs_do_create_link_sd+0xc0/0x110 [ 650.231144][T16073] device_add_class_symlinks+0x1cf/0x240 [ 650.236816][T16073] device_add+0x507/0xc20 [ 650.241267][T16073] wiphy_register+0x1dad/0x2ae0 [ 650.246154][T16073] ? cfg80211_event_work+0x40/0x40 [ 650.251363][T16073] ? minstrel_ht_alloc+0x88a/0x990 [ 650.256526][T16073] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 650.262637][T16073] ieee80211_register_hw+0x3464/0x4250 [ 650.268233][T16073] ? ieee80211_tasklet_handler+0x20/0x20 [ 650.273878][T16073] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 650.279956][T16073] ? __debug_object_init+0xec/0x450 [ 650.285178][T16073] ? __asan_memset+0x22/0x40 [ 650.289799][T16073] ? __hrtimer_init+0x186/0x270 [ 650.295154][T16073] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 650.301112][T16073] ? mac80211_hwsim_free+0x220/0x220 [ 650.306447][T16073] ? rcu_is_watching+0x15/0xb0 [ 650.311244][T16073] ? kstrndup+0xbd/0x140 [ 650.315527][T16073] hwsim_new_radio_nl+0xdc9/0x1a90 [ 650.320747][T16073] ? __nla_validate+0x50/0x50 [ 650.325545][T16073] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 650.331995][T16073] ? __nla_parse+0x40/0x50 [ 650.336431][T16073] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 650.342779][T16073] genl_family_rcv_msg_doit+0x211/0x310 [ 650.348339][T16073] ? end_current_label_crit_section+0x170/0x170 [ 650.354607][T16073] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 650.360787][T16073] ? bpf_lsm_capable+0x9/0x10 [ 650.365483][T16073] ? security_capable+0x89/0xb0 [ 650.370363][T16073] genl_rcv_msg+0x619/0x7a0 [ 650.374898][T16073] ? genl_bind+0x360/0x360 [ 650.379408][T16073] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 650.385796][T16073] ? ref_tracker_free+0x690/0x840 [ 650.390856][T16073] netlink_rcv_skb+0x241/0x4d0 [ 650.395644][T16073] ? genl_bind+0x360/0x360 [ 650.400071][T16073] ? netlink_ack+0x1180/0x1180 [ 650.404874][T16073] ? __lock_acquire+0x7d40/0x7d40 [ 650.409925][T16073] ? down_read+0x1ac/0x2e0 [ 650.414356][T16073] genl_rcv+0x28/0x40 [ 650.418349][T16073] netlink_unicast+0x751/0x8d0 [ 650.423142][T16073] netlink_sendmsg+0x8d0/0xbf0 [ 650.428194][T16073] ? netlink_getsockopt+0x590/0x590 [ 650.433587][T16073] ? aa_sock_msg_perm+0x94/0x150 [ 650.438539][T16073] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 650.443871][T16073] ? security_socket_sendmsg+0x80/0xa0 [ 650.449344][T16073] ? netlink_getsockopt+0x590/0x590 [ 650.454580][T16073] ____sys_sendmsg+0x5ba/0x960 [ 650.459915][T16073] ? __asan_memset+0x22/0x40 [ 650.464665][T16073] ? __sys_sendmsg_sock+0x30/0x30 [ 650.469718][T16073] ? __import_iovec+0x5f2/0x850 [ 650.474619][T16073] ? import_iovec+0x73/0xa0 [ 650.479153][T16073] ___sys_sendmsg+0x2a6/0x360 [ 650.483948][T16073] ? __sys_sendmsg+0x2a0/0x2a0 [ 650.488746][T16073] ? trace_call_bpf+0xc3/0x6c0 [ 650.493640][T16073] __se_sys_sendmsg+0x1c2/0x2b0 [ 650.498512][T16073] ? __x64_sys_sendmsg+0x80/0x80 [ 650.503475][T16073] ? lockdep_hardirqs_on+0x98/0x150 [ 650.508698][T16073] do_syscall_64+0x55/0xa0 [ 650.513126][T16073] ? clear_bhb_loop+0x40/0x90 [ 650.517820][T16073] ? clear_bhb_loop+0x40/0x90 [ 650.522609][T16073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.528513][T16073] RIP: 0033:0x7f602779c819 [ 650.532939][T16073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.552908][T16073] RSP: 002b:00007f60285e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.561512][T16073] RAX: ffffffffffffffda RBX: 00007f6027a16090 RCX: 00007f602779c819 [ 650.569604][T16073] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 650.577600][T16073] RBP: 00007f6027832c91 R08: 0000000000000000 R09: 0000000000000000 [ 650.585665][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.593653][T16073] R13: 00007f6027a16128 R14: 00007f6027a16090 R15: 00007ffff9062068 [ 650.601740][T16073] [ 650.710243][T16079] netlink: 'syz.1.2639': attribute type 3 has an invalid length. [ 650.747969][T16076] netlink: 'syz.0.2638': attribute type 3 has an invalid length. [ 650.756388][T16076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2638'. [ 650.766001][T16070] netlink: 'syz.2.2637': attribute type 4 has an invalid length. [ 650.766022][T16070] netlink: 174100 bytes leftover after parsing attributes in process `syz.2.2637'. [ 650.786045][T16079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2639'. [ 651.116105][T16088] netlink: 'syz.3.2641': attribute type 21 has an invalid length. [ 651.159653][T16088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2641'. [ 651.595797][T16099] netlink: 'syz.3.2645': attribute type 10 has an invalid length. [ 651.712931][T16105] netlink: 'syz.3.2645': attribute type 9 has an invalid length. [ 651.767783][T16105] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2645'. [ 652.570457][T16116] netlink: 'syz.1.2648': attribute type 28 has an invalid length. [ 652.625329][T16106] netlink: 'syz.3.2645': attribute type 9 has an invalid length. [ 652.633388][T16116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2648'. [ 652.649913][T16106] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2645'. [ 653.019624][T16125] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2649'. [ 653.054600][T16125] openvswitch: netlink: Message has 4 unknown bytes. [ 654.634111][T16159] __nla_validate_parse: 1 callbacks suppressed [ 654.634149][T16159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2660'. [ 654.694512][T16163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2662'. [ 654.716952][T16163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2662'. [ 654.733144][T16163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2662'. [ 654.783160][T16163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2662'. [ 655.246641][T16182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.456846][T16184] validate_nla: 7 callbacks suppressed [ 655.456868][T16184] netlink: 'syz.1.2667': attribute type 10 has an invalid length. [ 655.557674][T16184] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 656.195248][T16204] netlink: 'syz.2.2674': attribute type 28 has an invalid length. [ 656.224472][T16200] netlink: 'syz.0.2672': attribute type 29 has an invalid length. [ 656.227729][T16204] netlink: 'syz.2.2674': attribute type 4 has an invalid length. [ 656.257906][T16204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2674'. [ 656.302819][T16200] netlink: 'syz.0.2672': attribute type 29 has an invalid length. [ 656.352945][T16207] netlink: 'syz.0.2672': attribute type 29 has an invalid length. [ 656.373727][T16211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2675'. [ 656.445310][T16211] netlink: 'syz.1.2675': attribute type 21 has an invalid length. [ 656.470244][T16211] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2675'. [ 656.862486][T16201] netlink: 'syz.3.2673': attribute type 7 has an invalid length. [ 657.332930][T16232] netlink: 'syz.1.2679': attribute type 46 has an invalid length. [ 657.409369][T16232] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2679'. [ 657.770227][T16242] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2682'. [ 658.581302][T16254] netlink: 'syz.1.2687': attribute type 29 has an invalid length. [ 659.690309][T16277] __nla_validate_parse: 1 callbacks suppressed [ 659.690347][T16277] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2693'. [ 660.701635][T16287] validate_nla: 4 callbacks suppressed [ 660.701667][T16287] netlink: 'syz.2.2695': attribute type 21 has an invalid length. [ 660.737714][T16287] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2695'. [ 660.758224][T16287] netlink: 'syz.2.2695': attribute type 5 has an invalid length. [ 660.781032][T16287] netlink: 'syz.2.2695': attribute type 6 has an invalid length. [ 660.803274][T16287] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2695'. [ 663.265156][T16315] pim6reg1: entered allmulticast mode [ 663.704744][T16323] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2706'. [ 664.558547][T16345] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 664.599380][T16345] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2713'. [ 664.743043][T16347] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2714'. [ 665.074127][T16354] netlink: 'syz.0.2716': attribute type 21 has an invalid length. [ 665.099950][T16354] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2716'. [ 665.115986][T16364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2719'. [ 665.125604][T16364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2719'. [ 666.233931][T16381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.265084][T16364] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2719'. [ 669.547659][T16410] netlink: 'syz.0.2731': attribute type 10 has an invalid length. [ 671.135944][T16425] netlink: 'syz.2.2734': attribute type 21 has an invalid length. [ 671.154168][T16425] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2734'. [ 672.730934][T16453] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2743'. [ 672.753026][T16453] openvswitch: netlink: Key type 4112 is out of range max 32 [ 672.804290][T16457] netlink: 'syz.2.2744': attribute type 9 has an invalid length. [ 672.835877][T16455] netlink: 'syz.0.2745': attribute type 10 has an invalid length. [ 672.843535][T16457] netlink: 84748 bytes leftover after parsing attributes in process `syz.2.2744'. [ 672.885618][T16455] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.893962][T16455] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.936108][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.943492][T16455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.951224][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.958551][T16455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.987040][T16455] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 673.137629][T16465] netlink: 'syz.1.2748': attribute type 39 has an invalid length. [ 673.674460][T16482] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 673.743280][T16482] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2753'. [ 674.328086][T16500] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 674.487126][T16508] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.2762'. [ 674.898731][T16527] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2767'. [ 674.991411][T16528] netlink: 'syz.3.2768': attribute type 21 has an invalid length. [ 675.080423][T14518] Bluetooth: hci2: ISO packet for unknown connection handle 2563 [ 675.113968][T16528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2768'. [ 675.405899][T16537] netlink: 'syz.0.2772': attribute type 2 has an invalid length. [ 675.498354][T16537] netlink: 'syz.0.2772': attribute type 4 has an invalid length. [ 675.538417][T16537] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2772'. [ 675.991693][T16554] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2779'. [ 676.238261][T16567] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 676.246066][T16567] netlink: 'syz.3.2777': attribute type 3 has an invalid length. [ 676.325214][T16567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2777'. [ 682.781674][T16629] netlink: 'syz.0.2797': attribute type 11 has an invalid length. [ 682.946259][T16627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2796'. [ 682.958683][T16627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2796'. [ 683.516222][T16663] netlink: 'syz.0.2806': attribute type 8 has an invalid length. [ 683.927104][T16673] netlink: 'syz.3.2808': attribute type 9 has an invalid length. [ 683.949650][T16673] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2808'. [ 685.288055][T16701] netlink: 'syz.0.2813': attribute type 21 has an invalid length. [ 685.360399][T16701] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2813'. [ 685.761846][T16708] netlink: 'syz.2.2818': attribute type 46 has an invalid length. [ 685.800688][T16708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2818'. [ 686.205484][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.212947][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.463614][T16720] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2822'. [ 686.490646][T16720] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 686.492615][T16717] tun0: tun_chr_ioctl cmd 1074025677 [ 686.503864][T16725] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2823'. [ 686.509652][T16720] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 686.538577][T16717] tun0: linktype set to 768 [ 686.580535][T16720] netlink: 'syz.3.2822': attribute type 33 has an invalid length. [ 686.602513][T16720] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2822'. [ 686.670275][T16720] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2822'. [ 687.531194][T16748] netlink: 'syz.3.2827': attribute type 9 has an invalid length. [ 687.566872][T16748] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2827'. [ 688.363453][T16761] netlink: 'syz.2.2832': attribute type 21 has an invalid length. [ 688.419923][T16761] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2832'. [ 688.694255][T16770] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2835'. [ 689.503933][T16777] tun0: tun_chr_ioctl cmd 1074025677 [ 689.519107][T16777] tun0: linktype set to 768 [ 693.323560][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 693.460552][T16836] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2852'. [ 695.384005][T16853] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2855'. [ 695.770202][T16864] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2855'. [ 697.504725][T16897] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 699.110195][T16926] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2875'. [ 699.153612][T16927] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2875'. [ 699.943517][T16955] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 700.376236][T16970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2888'. [ 706.717331][T17068] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2912'. [ 706.757988][T17068] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.2912'. [ 706.818382][T17074] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.825918][T17074] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.859135][T17074] bridge0: entered allmulticast mode [ 707.576091][T17076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.613649][T17086] netlink: 'syz.2.2916': attribute type 6 has an invalid length. [ 708.266424][T17096] netlink: 'syz.3.2921': attribute type 10 has an invalid length. [ 710.300037][T17111] delete_channel: no stack [ 710.589087][T17123] netlink: 'syz.2.2918': attribute type 15 has an invalid length. [ 710.782645][T17123] netlink: 'syz.2.2918': attribute type 7 has an invalid length. [ 710.956597][T17122] netlink: 'syz.3.2926': attribute type 6 has an invalid length. [ 712.377381][T17127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.387839][T17127] IPv6: NLM_F_CREATE should be set when creating new route [ 712.407592][T17127] IPv6: NLM_F_CREATE should be set when creating new route [ 712.417617][T17127] IPv6: NLM_F_CREATE should be set when creating new route [ 715.321020][T15817] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 715.330338][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 715.340810][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 715.362161][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 715.388475][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 715.399498][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 715.408854][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 715.487134][T17194] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2946'. [ 715.891968][ T6032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.929970][T17183] netlink: 'syz.3.2943': attribute type 10 has an invalid length. [ 716.116428][T17183] team0: Device ipvlan1 failed to register rx_handler [ 716.352941][ T6032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.633826][ T6032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.732981][ T6032] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.835026][T17185] chnl_net:caif_netlink_parms(): no params data found [ 717.292833][T17185] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.333048][T17185] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.348526][T17185] bridge_slave_0: entered allmulticast mode [ 717.387652][T17185] bridge_slave_0: entered promiscuous mode [ 717.400533][T17185] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.417647][T17185] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.435202][T17185] bridge_slave_1: entered allmulticast mode [ 717.446704][T17185] bridge_slave_1: entered promiscuous mode [ 717.481520][ T5775] Bluetooth: hci1: command tx timeout [ 718.631034][T17185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.820929][T17185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.141361][T17185] team0: Port device team_slave_0 added [ 719.436709][T17185] team0: Port device team_slave_1 added [ 719.559907][ T5775] Bluetooth: hci1: command tx timeout [ 719.951006][T17240] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2957'. [ 720.148234][T17185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.174290][T17185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.237325][T17185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.260264][T17240] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 720.296487][T17280] netlink: 'syz.1.2964': attribute type 29 has an invalid length. [ 720.399632][T17185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.417779][T17185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.469356][T17185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.482004][T17280] netlink: 'syz.1.2964': attribute type 29 has an invalid length. [ 720.703186][T17185] hsr_slave_0: entered promiscuous mode [ 720.809824][T17185] hsr_slave_1: entered promiscuous mode [ 720.849646][T17185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.857461][T17185] Cannot create hsr debugfs directory [ 720.916183][T17296] netlink: 'syz.3.2967': attribute type 10 has an invalid length. [ 721.103126][T17296] team0 (unregistering): Port device team_slave_0 removed [ 721.159979][T17296] team0 (unregistering): Port device team_slave_1 removed [ 721.340526][T17317] netlink: 'syz.1.2971': attribute type 8 has an invalid length. [ 721.355150][T17317] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2971'. [ 721.649205][ T5775] Bluetooth: hci1: command tx timeout [ 722.284481][T17323] tap0: tun_chr_ioctl cmd 1074025677 [ 722.294710][T17323] tap0: linktype set to 6 [ 722.357102][T17344] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2975'. [ 722.721429][ T6032] veth0_to_team: left allmulticast mode [ 722.762023][ T6032] veth0_to_team: left promiscuous mode [ 722.769794][ T6032] Ÿë: port 1(veth0_to_team) entered disabled state [ 722.879678][ T6032] veth1_macvtap: left promiscuous mode [ 723.614193][T17366] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2980'. [ 723.729856][ T5775] Bluetooth: hci1: command tx timeout [ 724.537202][ T6032] .` (unregistering): (slave c@0Ù): Releasing backup interface [ 724.603107][ T6032] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.016433][ T6032] .` (unregistering): Released all slaves [ 725.129441][T17364] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2980'. [ 725.372370][T17389] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 725.561448][T17387] netlink: 'syz.3.2986': attribute type 5 has an invalid length. [ 725.574347][T17388] tun0: tun_chr_ioctl cmd 1074025694 [ 725.933299][T17185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 725.953264][T17185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 725.986998][T17185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 725.997291][T17402] netlink: 'syz.3.2990': attribute type 1 has an invalid length. [ 726.017044][T17185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 726.024025][T17402] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.2990'. [ 726.119639][T17402] netlink: 'syz.3.2990': attribute type 16 has an invalid length. [ 726.136059][T17402] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2990'. [ 726.893382][T17185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.227166][T17185] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.273569][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.280793][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.405474][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.412764][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.621770][T17439] netlink: 'syz.1.2996': attribute type 5 has an invalid length. [ 727.681148][T17447] netlink: 'syz.3.2997': attribute type 10 has an invalid length. [ 727.706154][T17447] netlink: 'syz.3.2997': attribute type 9 has an invalid length. [ 727.737851][T17447] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2997'. [ 727.740833][T17417] netlink: 'syz.0.2991': attribute type 1 has an invalid length. [ 727.959711][T17417] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2991'. [ 728.253591][T17455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 728.416653][T17455] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 728.435899][T17450] netlink: 'syz.3.2997': attribute type 9 has an invalid length. [ 728.461673][T17459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 728.490145][T17458] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2998'. [ 728.518683][T17450] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2997'. [ 730.109477][T17185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.495426][T17185] veth0_vlan: entered promiscuous mode [ 730.533659][T17185] veth1_vlan: entered promiscuous mode [ 731.543219][T17185] veth0_macvtap: entered promiscuous mode [ 731.583279][T17185] veth1_macvtap: entered promiscuous mode [ 731.643378][T17495] netlink: 'syz.1.3003': attribute type 10 has an invalid length. [ 731.816266][T17495] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.862188][T17495] bond0: (slave team0): Enslaving as an active interface with an up link [ 731.875573][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.907709][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.937683][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.964513][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.977991][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.988921][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.009943][T17185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.036315][T17503] pim6reg1: entered promiscuous mode [ 732.074148][T17503] pim6reg1: entered allmulticast mode [ 732.122943][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.155496][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.178283][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.189072][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.201572][T17185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.227546][T17185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.259476][T17185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.414134][T17185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.430234][T17185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.459393][T17185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.475028][T17185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.603494][T17519] netlink: 'syz.3.3007': attribute type 2 has an invalid length. [ 732.890842][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.947900][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.114319][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.127976][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.160515][T17528] netlink: 'syz.0.3005': attribute type 5 has an invalid length. [ 733.298490][T17543] syz.3.3010[17543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 733.298651][T17543] syz.3.3010[17543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 733.812553][T17558] netlink: 'syz.3.3012': attribute type 3 has an invalid length. [ 733.872717][T17558] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3012'. [ 734.278196][T14518] Bluetooth: hci0: command 0x0406 tx timeout [ 734.796903][T17589] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 734.899890][T17589] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3018'. [ 735.923909][T17624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.936201][T17624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.988599][T17624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.996082][T17624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.174864][T17626] netlink: 'syz.2.3025': attribute type 21 has an invalid length. [ 736.886726][T17650] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3034'. [ 737.055176][T17653] netlink: 'syz.1.3035': attribute type 3 has an invalid length. [ 737.063334][T17653] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3035'. [ 738.222308][T17685] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3044'. [ 738.250851][T17685] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 738.278390][T17685] CPU: 0 PID: 17685 Comm: syz.3.3044 Not tainted syzkaller #0 [ 738.286028][T17685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.296131][T17685] Call Trace: [ 738.299452][T17685] [ 738.302424][T17685] dump_stack_lvl+0x18c/0x250 [ 738.307177][T17685] ? show_regs_print_info+0x20/0x20 [ 738.312440][T17685] ? load_image+0x420/0x420 [ 738.317016][T17685] sysfs_warn_dup+0x8e/0xa0 [ 738.321566][T17685] sysfs_do_create_link_sd+0xc0/0x110 [ 738.326999][T17685] device_add_class_symlinks+0x1cf/0x240 [ 738.332803][T17685] device_add+0x507/0xc20 [ 738.337257][T17685] wiphy_register+0x1dad/0x2ae0 [ 738.342602][T17685] ? cfg80211_event_work+0x40/0x40 [ 738.347768][T17685] ? minstrel_ht_alloc+0x88a/0x990 [ 738.352950][T17685] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 738.359168][T17685] ieee80211_register_hw+0x3464/0x4250 [ 738.364824][T17685] ? ieee80211_tasklet_handler+0x20/0x20 [ 738.370600][T17685] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 738.376556][T17685] ? __debug_object_init+0xec/0x450 [ 738.381822][T17685] ? __asan_memset+0x22/0x40 [ 738.386471][T17685] ? __hrtimer_init+0x186/0x270 [ 738.391383][T17685] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 738.397408][T17685] ? mac80211_hwsim_free+0x220/0x220 [ 738.402796][T17685] ? rcu_is_watching+0x15/0xb0 [ 738.407592][T17685] ? kstrndup+0xbd/0x140 [ 738.411900][T17685] hwsim_new_radio_nl+0xdc9/0x1a90 [ 738.417070][T17685] ? __nla_validate+0x50/0x50 [ 738.421786][T17685] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 738.428149][T17685] ? __nla_parse+0x40/0x50 [ 738.432612][T17685] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 738.439149][T17685] genl_family_rcv_msg_doit+0x211/0x310 [ 738.444711][T17685] ? end_current_label_crit_section+0x170/0x170 [ 738.451180][T17685] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 738.457284][T17685] ? bpf_lsm_capable+0x9/0x10 [ 738.461980][T17685] ? security_capable+0x89/0xb0 [ 738.467036][T17685] genl_rcv_msg+0x619/0x7a0 [ 738.471563][T17685] ? genl_bind+0x360/0x360 [ 738.475998][T17685] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 738.482433][T17685] ? ref_tracker_free+0x690/0x840 [ 738.487495][T17685] netlink_rcv_skb+0x241/0x4d0 [ 738.492404][T17685] ? genl_bind+0x360/0x360 [ 738.496869][T17685] ? netlink_ack+0x1180/0x1180 [ 738.501757][T17685] ? __lock_acquire+0x7d40/0x7d40 [ 738.506813][T17685] ? down_read+0x1ac/0x2e0 [ 738.511249][T17685] genl_rcv+0x28/0x40 [ 738.515248][T17685] netlink_unicast+0x751/0x8d0 [ 738.520042][T17685] netlink_sendmsg+0x8d0/0xbf0 [ 738.524943][T17685] ? netlink_getsockopt+0x590/0x590 [ 738.530176][T17685] ? aa_sock_msg_perm+0x94/0x150 [ 738.535136][T17685] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 738.540442][T17685] ? security_socket_sendmsg+0x80/0xa0 [ 738.545912][T17685] ? netlink_getsockopt+0x590/0x590 [ 738.551139][T17685] ____sys_sendmsg+0x5ba/0x960 [ 738.555924][T17685] ? __asan_memset+0x22/0x40 [ 738.560538][T17685] ? __sys_sendmsg_sock+0x30/0x30 [ 738.565693][T17685] ? __import_iovec+0x5f2/0x850 [ 738.570601][T17685] ? import_iovec+0x73/0xa0 [ 738.575135][T17685] ___sys_sendmsg+0x2a6/0x360 [ 738.579851][T17685] ? __sys_sendmsg+0x2a0/0x2a0 [ 738.584685][T17685] __se_sys_sendmsg+0x1c2/0x2b0 [ 738.589644][T17685] ? __x64_sys_sendmsg+0x80/0x80 [ 738.594629][T17685] ? lockdep_hardirqs_on+0x98/0x150 [ 738.600065][T17685] do_syscall_64+0x55/0xa0 [ 738.604626][T17685] ? clear_bhb_loop+0x40/0x90 [ 738.609345][T17685] ? clear_bhb_loop+0x40/0x90 [ 738.614078][T17685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.619997][T17685] RIP: 0033:0x7f5e2b19c819 [ 738.624433][T17685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.644429][T17685] RSP: 002b:00007f5e2c07c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.652866][T17685] RAX: ffffffffffffffda RBX: 00007f5e2b415fa0 RCX: 00007f5e2b19c819 [ 738.660870][T17685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 738.669146][T17685] RBP: 00007f5e2b232c91 R08: 0000000000000000 R09: 0000000000000000 [ 738.677262][T17685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.685470][T17685] R13: 00007f5e2b416038 R14: 00007f5e2b415fa0 R15: 00007ffe59cdab38 [ 738.693520][T17685] [ 738.847764][T17696] netlink: 'syz.2.3045': attribute type 21 has an invalid length. [ 739.216557][T17709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3049'. [ 739.537864][T17717] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3052'. [ 739.564390][T17718] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.3051'. [ 739.597839][T17721] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3053'. [ 742.081160][T17774] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.3070'. [ 742.208837][T17779] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3072'. [ 742.800969][T17779] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3072'. [ 743.554583][T17791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.944527][T17810] netlink: 'syz.2.3082': attribute type 10 has an invalid length. [ 743.989714][T17810] bond0: (slave bond_slave_0): Releasing backup interface [ 744.150888][T17814] netlink: 'syz.1.3083': attribute type 28 has an invalid length. [ 744.175713][T17814] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3083'. [ 744.395446][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'. [ 747.565215][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.571740][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.690102][T17843] delete_channel: no stack [ 747.774606][T17853] netlink: 'syz.0.3095': attribute type 2 has an invalid length. [ 747.813214][T17853] netlink: 'syz.0.3095': attribute type 8 has an invalid length. [ 747.826701][T17853] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3095'. [ 747.839645][T17852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.848136][T17852] IPv6: NLM_F_CREATE should be set when creating new route [ 747.857804][T17852] IPv6: NLM_F_CREATE should be set when creating new route [ 747.867176][T17852] IPv6: NLM_F_CREATE should be set when creating new route [ 747.983887][T17861] netlink: 'syz.3.3098': attribute type 21 has an invalid length. [ 747.995433][T17861] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.3098'. [ 748.264722][T17869] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3101'. [ 748.274755][T17869] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3101'. [ 748.296194][T17872] netlink: 'syz.1.3102': attribute type 10 has an invalid length. [ 748.323648][T17872] netlink: 'syz.1.3102': attribute type 10 has an invalid length. [ 748.348070][T17872] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3102'. [ 748.377821][T17872] openvswitch: netlink: Message has 4 unknown bytes. [ 749.348911][T17894] netlink: 'syz.0.3109': attribute type 21 has an invalid length. [ 749.388076][T17894] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 751.658957][T17927] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3118'. [ 752.364170][T17942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 752.371751][T17942] IPv6: NLM_F_CREATE should be set when creating new route [ 752.599293][T17932] delete_channel: no stack [ 754.757776][T14518] Bluetooth: hci2: command 0x0406 tx timeout [ 756.431746][T17984] syzkaller0: entered promiscuous mode [ 756.477577][T17984] syzkaller0: entered allmulticast mode [ 762.542357][T18013] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3141'. [ 762.896812][T18028] netlink: 'syz.0.3147': attribute type 1 has an invalid length. [ 762.904730][T18028] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3147'. [ 762.928840][T18028] netlink: 'syz.0.3147': attribute type 9 has an invalid length. [ 765.610107][T18057] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3155'. [ 765.645998][T18057] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3155'. [ 765.729838][T18059] netlink: 'syz.2.3154': attribute type 4 has an invalid length. [ 765.764572][T18054] netlink: 'syz.2.3154': attribute type 4 has an invalid length. [ 766.574996][T18078] À: port 1(vlan0) entered blocking state [ 766.597235][T18078] À: port 1(vlan0) entered disabled state [ 766.626560][T18078] vlan0: entered allmulticast mode [ 766.643158][T18078] veth0_vlan: entered allmulticast mode [ 766.654533][T18078] vlan0: entered promiscuous mode [ 766.683464][T18074] À: port 1(vlan0) entered blocking state [ 766.690012][T18074] À: port 1(vlan0) entered forwarding state [ 767.458472][T18106] netlink: 'syz.1.3168': attribute type 10 has an invalid length. [ 767.481686][T18106] netlink: 'syz.1.3168': attribute type 10 has an invalid length. [ 767.510969][T18106] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.3168'. [ 767.565005][T18106] openvswitch: netlink: Message has 4 unknown bytes. [ 770.020504][T18119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3172'. [ 770.031094][T18123] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 770.036787][T18123] pim6reg0: owner set to 0 [ 770.042096][T18124] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3173'. [ 770.207993][T18132] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3176'. [ 770.224739][T18132] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3176'. [ 770.236321][T18130] netlink: 'syz.1.3175': attribute type 1 has an invalid length. [ 770.245004][T18132] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 770.255149][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 770.530834][T18142] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 770.606847][T18142] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 770.682735][T18139] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3177'. [ 771.490173][T18157] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3182'. [ 771.805002][T18157] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 772.657830][T18184] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.3185'. [ 772.759403][T18188] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3187'. [ 773.831327][T18197] netlink: 'syz.3.3191': attribute type 29 has an invalid length. [ 774.141319][T18204] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3191'. [ 774.161107][T18197] netlink: 'syz.3.3191': attribute type 29 has an invalid length. [ 774.667580][T18198] netlink: 'syz.3.3191': attribute type 29 has an invalid length. [ 774.685483][T18209] sit0: entered allmulticast mode [ 775.447080][T18228] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3195'. [ 775.512046][T18228] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 775.577739][T18228] CPU: 0 PID: 18228 Comm: syz.1.3195 Not tainted syzkaller #0 [ 775.585291][T18228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.595517][T18228] Call Trace: [ 775.598816][T18228] [ 775.601757][T18228] dump_stack_lvl+0x18c/0x250 [ 775.606465][T18228] ? show_regs_print_info+0x20/0x20 [ 775.611769][T18228] ? load_image+0x420/0x420 [ 775.616310][T18228] sysfs_warn_dup+0x8e/0xa0 [ 775.620922][T18228] sysfs_do_create_link_sd+0xc0/0x110 [ 775.626318][T18228] device_add_class_symlinks+0x1cf/0x240 [ 775.631977][T18228] device_add+0x507/0xc20 [ 775.636334][T18228] wiphy_register+0x1dad/0x2ae0 [ 775.641229][T18228] ? cfg80211_event_work+0x40/0x40 [ 775.646352][T18228] ? minstrel_ht_alloc+0x88a/0x990 [ 775.651581][T18228] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 775.657671][T18228] ieee80211_register_hw+0x3464/0x4250 [ 775.663347][T18228] ? ieee80211_tasklet_handler+0x20/0x20 [ 775.669079][T18228] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 775.674991][T18228] ? __debug_object_init+0xec/0x450 [ 775.680255][T18228] ? __asan_memset+0x22/0x40 [ 775.684869][T18228] ? __hrtimer_init+0x186/0x270 [ 775.689741][T18228] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 775.695503][T18228] ? mac80211_hwsim_free+0x220/0x220 [ 775.700801][T18228] ? rcu_is_watching+0x15/0xb0 [ 775.705598][T18228] ? kstrndup+0xbd/0x140 [ 775.709963][T18228] hwsim_new_radio_nl+0xdc9/0x1a90 [ 775.715094][T18228] ? __nla_validate+0x50/0x50 [ 775.719800][T18228] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 775.726241][T18228] ? __nla_parse+0x40/0x50 [ 775.730761][T18228] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 775.737369][T18228] genl_family_rcv_msg_doit+0x211/0x310 [ 775.743016][T18228] ? end_current_label_crit_section+0x170/0x170 [ 775.749364][T18228] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 775.755377][T18228] ? bpf_lsm_capable+0x9/0x10 [ 775.760071][T18228] ? security_capable+0x89/0xb0 [ 775.764952][T18228] genl_rcv_msg+0x619/0x7a0 [ 775.769480][T18228] ? genl_bind+0x360/0x360 [ 775.773910][T18228] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 775.780262][T18228] ? perf_trace_lock+0xfc/0x3b0 [ 775.785167][T18228] netlink_rcv_skb+0x241/0x4d0 [ 775.789990][T18228] ? genl_bind+0x360/0x360 [ 775.794439][T18228] ? netlink_ack+0x1180/0x1180 [ 775.799247][T18228] ? __lock_acquire+0x7d40/0x7d40 [ 775.804474][T18228] ? down_read+0x1ac/0x2e0 [ 775.808907][T18228] genl_rcv+0x28/0x40 [ 775.812993][T18228] netlink_unicast+0x751/0x8d0 [ 775.817896][T18228] netlink_sendmsg+0x8d0/0xbf0 [ 775.822874][T18228] ? netlink_getsockopt+0x590/0x590 [ 775.828276][T18228] ? aa_sock_msg_perm+0x94/0x150 [ 775.833289][T18228] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 775.838607][T18228] ? security_socket_sendmsg+0x80/0xa0 [ 775.844078][T18228] ? netlink_getsockopt+0x590/0x590 [ 775.849431][T18228] ____sys_sendmsg+0x5ba/0x960 [ 775.854574][T18228] ? __asan_memset+0x22/0x40 [ 775.859281][T18228] ? __sys_sendmsg_sock+0x30/0x30 [ 775.864318][T18228] ? __import_iovec+0x5f2/0x850 [ 775.869277][T18228] ? import_iovec+0x73/0xa0 [ 775.873799][T18228] ___sys_sendmsg+0x2a6/0x360 [ 775.878554][T18228] ? __sys_sendmsg+0x2a0/0x2a0 [ 775.883357][T18228] ? debug_mutex_init+0x38/0x70 [ 775.888253][T18228] __se_sys_sendmsg+0x1c2/0x2b0 [ 775.893121][T18228] ? __x64_sys_sendmsg+0x80/0x80 [ 775.898177][T18228] ? lockdep_hardirqs_on+0x98/0x150 [ 775.903408][T18228] do_syscall_64+0x55/0xa0 [ 775.907839][T18228] ? clear_bhb_loop+0x40/0x90 [ 775.912542][T18228] ? clear_bhb_loop+0x40/0x90 [ 775.917245][T18228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.923155][T18228] RIP: 0033:0x7f185599c819 [ 775.927679][T18228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.947391][T18228] RSP: 002b:00007f1856816028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.956016][T18228] RAX: ffffffffffffffda RBX: 00007f1855c16180 RCX: 00007f185599c819 [ 775.964177][T18228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 775.972248][T18228] RBP: 00007f1855a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 775.980451][T18228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.988551][T18228] R13: 00007f1855c16218 R14: 00007f1855c16180 R15: 00007fffe5ae0ef8 [ 775.996657][T18228] [ 776.132784][T18225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3196'. [ 780.592600][T18268] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3204'. [ 780.687044][T18266] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3202'. [ 781.764309][T18277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3207'. [ 782.084580][T18279] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3206'. [ 782.312112][T18279] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 783.619712][T18301] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3213'. [ 783.827116][T18312] netlink: 'syz.3.3214': attribute type 10 has an invalid length. [ 783.880528][T18312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3214'. [ 786.116540][T18331] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3222'. [ 786.521122][T18348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.203331][T18373] netlink: 'syz.2.3231': attribute type 10 has an invalid length. [ 787.235009][T18373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3231'. [ 787.277175][T18373] team0: entered promiscuous mode [ 787.307719][T18373] team_slave_0: entered promiscuous mode [ 787.330179][T18373] team_slave_1: entered promiscuous mode [ 787.355417][T18373] team0: entered allmulticast mode [ 787.377629][T18373] team_slave_0: entered allmulticast mode [ 787.407681][T18373] team_slave_1: entered allmulticast mode [ 787.432160][T18373] bridge0: port 3(team0) entered blocking state [ 787.451464][T18373] bridge0: port 3(team0) entered disabled state [ 787.462087][T18373] bridge0: port 3(team0) entered blocking state [ 787.468616][T18373] bridge0: port 3(team0) entered forwarding state [ 788.475371][T18386] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3236'. [ 788.557176][T18386] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 788.653120][T18386] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 788.859952][T18365] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3229'. [ 788.910831][T18386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3236'. [ 788.947039][T18395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3237'. [ 789.020120][T18365] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 789.034484][T18365] CPU: 1 PID: 18365 Comm: syz.1.3229 Not tainted syzkaller #0 [ 789.042166][T18365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.052298][T18365] Call Trace: [ 789.055606][T18365] [ 789.058563][T18365] dump_stack_lvl+0x18c/0x250 [ 789.063291][T18365] ? show_regs_print_info+0x20/0x20 [ 789.068515][T18365] ? load_image+0x420/0x420 [ 789.073169][T18365] sysfs_warn_dup+0x8e/0xa0 [ 789.077693][T18365] sysfs_do_create_link_sd+0xc0/0x110 [ 789.083095][T18365] device_add_class_symlinks+0x1cf/0x240 [ 789.088778][T18365] device_add+0x507/0xc20 [ 789.093153][T18365] wiphy_register+0x1dad/0x2ae0 [ 789.098042][T18365] ? cfg80211_event_work+0x40/0x40 [ 789.103167][T18365] ? minstrel_ht_alloc+0x88a/0x990 [ 789.108392][T18365] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 789.114571][T18365] ieee80211_register_hw+0x3464/0x4250 [ 789.120067][T18365] ? ieee80211_tasklet_handler+0x20/0x20 [ 789.125799][T18365] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 789.131772][T18365] ? __debug_object_init+0xec/0x450 [ 789.136992][T18365] ? __asan_memset+0x22/0x40 [ 789.141600][T18365] ? __hrtimer_init+0x186/0x270 [ 789.146648][T18365] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 789.152494][T18365] ? mac80211_hwsim_free+0x220/0x220 [ 789.157964][T18365] ? rcu_is_watching+0x15/0xb0 [ 789.162835][T18365] ? kstrndup+0xbd/0x140 [ 789.167192][T18365] hwsim_new_radio_nl+0xdc9/0x1a90 [ 789.172323][T18365] ? __nla_validate+0x50/0x50 [ 789.177032][T18365] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 789.183480][T18365] ? __nla_parse+0x40/0x50 [ 789.188010][T18365] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 789.194358][T18365] genl_family_rcv_msg_doit+0x211/0x310 [ 789.200018][T18365] ? end_current_label_crit_section+0x170/0x170 [ 789.206279][T18365] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 789.212223][T18365] ? bpf_lsm_capable+0x9/0x10 [ 789.217042][T18365] ? security_capable+0x89/0xb0 [ 789.222020][T18365] genl_rcv_msg+0x619/0x7a0 [ 789.226554][T18365] ? genl_bind+0x360/0x360 [ 789.231160][T18365] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 789.237605][T18365] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 789.244431][T18365] netlink_rcv_skb+0x241/0x4d0 [ 789.249328][T18365] ? genl_bind+0x360/0x360 [ 789.253766][T18365] ? netlink_ack+0x1180/0x1180 [ 789.258566][T18365] ? __lock_acquire+0x7d40/0x7d40 [ 789.263639][T18365] ? down_read+0x1ac/0x2e0 [ 789.268094][T18365] genl_rcv+0x28/0x40 [ 789.272128][T18365] netlink_unicast+0x751/0x8d0 [ 789.276963][T18365] netlink_sendmsg+0x8d0/0xbf0 [ 789.281776][T18365] ? netlink_getsockopt+0x590/0x590 [ 789.287007][T18365] ? aa_sock_msg_perm+0x94/0x150 [ 789.291972][T18365] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 789.297309][T18365] ? security_socket_sendmsg+0x80/0xa0 [ 789.302919][T18365] ? netlink_getsockopt+0x590/0x590 [ 789.308163][T18365] ____sys_sendmsg+0x5ba/0x960 [ 789.312960][T18365] ? __asan_memset+0x22/0x40 [ 789.317595][T18365] ? __sys_sendmsg_sock+0x30/0x30 [ 789.322665][T18365] ? __import_iovec+0x5f2/0x850 [ 789.327558][T18365] ? import_iovec+0x73/0xa0 [ 789.332085][T18365] ___sys_sendmsg+0x2a6/0x360 [ 789.336814][T18365] ? __sys_sendmsg+0x2a0/0x2a0 [ 789.341682][T18365] __se_sys_sendmsg+0x1c2/0x2b0 [ 789.346578][T18365] ? __x64_sys_sendmsg+0x80/0x80 [ 789.351732][T18365] ? lockdep_hardirqs_on+0x98/0x150 [ 789.356955][T18365] do_syscall_64+0x55/0xa0 [ 789.361386][T18365] ? clear_bhb_loop+0x40/0x90 [ 789.366085][T18365] ? clear_bhb_loop+0x40/0x90 [ 789.370790][T18365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.376728][T18365] RIP: 0033:0x7f185599c819 [ 789.381173][T18365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.400908][T18365] RSP: 002b:00007f1856858028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.409359][T18365] RAX: ffffffffffffffda RBX: 00007f1855c15fa0 RCX: 00007f185599c819 [ 789.417373][T18365] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 789.425356][T18365] RBP: 00007f1855a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 789.433340][T18365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.441406][T18365] R13: 00007f1855c16038 R14: 00007f1855c15fa0 R15: 00007fffe5ae0ef8 [ 789.449416][T18365] [ 790.300060][T18409] netlink: 'syz.1.3240': attribute type 10 has an invalid length. [ 790.787910][T18409] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 791.574841][T18440] netlink: 'syz.0.3245': attribute type 10 has an invalid length. [ 791.606990][T18440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3245'. [ 791.661966][T18440] team0: entered promiscuous mode [ 791.690661][T18440] team_slave_0: entered promiscuous mode [ 791.735290][T18440] team_slave_1: entered promiscuous mode [ 791.786199][T18440] team0: entered allmulticast mode [ 791.823256][T18440] team_slave_0: entered allmulticast mode [ 791.883117][T18440] team_slave_1: entered allmulticast mode [ 791.913412][T18440] bridge0: port 3(team0) entered blocking state [ 791.924045][T18440] bridge0: port 3(team0) entered disabled state [ 793.979239][T18464] sctp: [Deprecated]: syz.3.3254 (pid 18464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 793.979239][T18464] Use struct sctp_sack_info instead [ 795.242319][T18493] netlink: 'syz.3.3261': attribute type 2 has an invalid length. [ 795.352684][T18493] netlink: 'syz.3.3261': attribute type 8 has an invalid length. [ 795.361791][T18493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3261'. [ 796.056657][T18498] sctp: [Deprecated]: syz.3.3263 (pid 18498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 796.056657][T18498] Use struct sctp_sack_info instead [ 796.503373][T18506] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3266'. [ 796.513037][T18506] netlink: get zone limit has 4 unknown bytes [ 796.522908][T18506] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3266'. [ 796.904188][T18516] netlink: 'syz.3.3269': attribute type 10 has an invalid length. [ 797.303320][T18524] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3272'. [ 797.649284][T18534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3276'. [ 797.834912][T18538] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3278'. [ 797.941428][T18547] netlink: 'syz.0.3280': attribute type 2 has an invalid length. [ 798.036022][T18551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3281'. [ 798.434826][T18562] netlink: 'syz.3.3285': attribute type 9 has an invalid length. [ 798.466715][T18562] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3285'. [ 798.726937][T18562] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3285'. [ 798.744717][T18562] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.3285'. [ 798.762438][T18562] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3285'. [ 798.904551][T18570] netlink: 'syz.1.3287': attribute type 21 has an invalid length. [ 798.915815][T18570] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3287'. [ 802.882338][T18632] syzkaller0: entered promiscuous mode [ 802.897814][T18632] syzkaller0: entered allmulticast mode [ 805.279617][T18649] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.3309'. [ 805.298856][T18649] netlink: 'syz.3.3309': attribute type 10 has an invalid length. [ 805.314030][T18650] netlink: 'syz.3.3309': attribute type 10 has an invalid length. [ 805.871498][T18668] netlink: 'syz.3.3315': attribute type 4 has an invalid length. [ 805.895238][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3315'. [ 805.959543][ T6044] tipc: Subscription rejected, illegal request [ 807.139454][T18684] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3320'. [ 808.576556][T18726] C: renamed from team_slave_0 (while UP) [ 808.625409][T18726] netlink: 'syz.1.3327': attribute type 3 has an invalid length. [ 808.637886][T18726] netlink: 'syz.1.3327': attribute type 1 has an invalid length. [ 808.687001][T18726] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3327'. [ 809.081239][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.088153][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.397355][T18755] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3336'. [ 810.717789][T18754] netlink: 'syz.2.3336': attribute type 10 has an invalid length. [ 811.513409][T18775] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3341'. [ 811.601679][T18775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3341'. [ 811.624469][T18776] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3341'. [ 811.966156][T18783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3345'. [ 811.987658][T18783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3345'. [ 812.009203][T18783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3345'. [ 812.574372][T18803] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.3352'. [ 812.977014][T18800] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3353'. [ 813.877788][T18827] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3361'. [ 815.931227][T18860] __nla_validate_parse: 4 callbacks suppressed [ 815.931248][T18860] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3371'. [ 815.956503][T18861] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3370'. [ 815.958962][T18859] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3370'. [ 816.034649][T18859] openvswitch: netlink: Flow key attribute not present in set flow. [ 816.412477][T18868] netlink: 'syz.2.3372': attribute type 11 has an invalid length. [ 816.420503][T18868] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.3372'. [ 816.458723][T18868] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3372'. [ 816.973823][T18866] netlink: 'syz.2.3372': attribute type 13 has an invalid length. [ 816.998961][T18866] netlink: 'syz.2.3372': attribute type 58 has an invalid length. [ 817.037827][T18866] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3372'. [ 817.413630][T18883] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3376'. [ 819.356598][T18896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 819.365950][T18896] IPv6: NLM_F_CREATE should be set when creating new route [ 819.378982][T18896] IPv6: NLM_F_CREATE should be set when creating new route [ 819.390459][T18896] IPv6: NLM_F_CREATE should be set when creating new route [ 819.587876][T18907] netlink: 'syz.2.3382': attribute type 21 has an invalid length. [ 819.618672][T18907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3382'. [ 819.711996][T18909] IPv6: Can't replace route, no match found [ 820.980505][T18930] netlink: 'syz.2.3389': attribute type 46 has an invalid length. [ 821.015628][T18930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3389'. [ 821.046782][T18924] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3386'. [ 821.207479][T18940] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3391'. [ 821.733193][T18945] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3392'. [ 821.971515][T18956] netlink: 'syz.1.3393': attribute type 10 has an invalid length. [ 823.041564][T18978] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.3402'. [ 823.798451][T18992] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3407'. [ 824.073201][T18987] sit0: entered allmulticast mode [ 826.118303][T19038] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3418'. [ 826.338560][T19034] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3415'. [ 827.237809][T19049] netlink: 'syz.1.3421': attribute type 10 has an invalid length. [ 827.317549][T19045] netlink: 'syz.3.3420': attribute type 10 has an invalid length. [ 827.357552][T19045] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3420'. [ 827.366549][T19045] hsr0: entered promiscuous mode [ 827.381580][T19045] bridge0: port 3(hsr0) entered blocking state [ 827.426983][T19045] bridge0: port 3(hsr0) entered disabled state [ 827.434507][T19045] hsr0: entered allmulticast mode [ 827.457919][T19045] hsr_slave_0: entered allmulticast mode [ 827.463777][T19045] hsr_slave_1: entered allmulticast mode [ 827.496233][T19045] bridge0: port 3(hsr0) entered blocking state [ 827.502836][T19045] bridge0: port 3(hsr0) entered forwarding state [ 827.857165][T19066] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3426'. [ 828.266875][T19079] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3430'. [ 828.337990][T19079] bridge_slave_1: default FDB implementation only supports local addresses [ 829.089833][T19093] netlink: 'syz.3.3434': attribute type 27 has an invalid length. [ 829.117068][T19093] netlink: 'syz.3.3434': attribute type 3 has an invalid length. [ 829.211143][T19093] netlink: 4943 bytes leftover after parsing attributes in process `syz.3.3434'. [ 829.635349][T19102] netlink: 'syz.1.3435': attribute type 10 has an invalid length. [ 829.661700][T19107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3438'. [ 829.676779][T19102] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3435'. [ 829.700742][T19102] hsr0: entered promiscuous mode [ 829.713280][T19102] bridge0: port 3(hsr0) entered blocking state [ 829.733113][T19109] netlink: 'syz.0.3439': attribute type 3 has an invalid length. [ 829.747742][T19102] bridge0: port 3(hsr0) entered disabled state [ 829.754411][T19109] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3439'. [ 829.785178][T19102] hsr0: entered allmulticast mode [ 829.827206][T19102] hsr_slave_0: entered allmulticast mode [ 829.888444][T19102] hsr_slave_1: entered allmulticast mode [ 829.920135][T19102] bridge0: port 3(hsr0) entered blocking state [ 829.926527][T19102] bridge0: port 3(hsr0) entered forwarding state [ 830.003577][T19107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3438'. [ 830.044049][T19119] netlink: 'syz.2.3440': attribute type 17 has an invalid length. [ 830.728596][T19126] netlink: 'syz.0.3441': attribute type 11 has an invalid length. [ 831.229000][T19138] @ÿ: renamed from bond_slave_0 (while UP) [ 831.868880][T19158] netlink: 'syz.1.3450': attribute type 20 has an invalid length. [ 832.470410][T19165] netlink: 'syz.0.3452': attribute type 10 has an invalid length. [ 832.479632][T19165] __nla_validate_parse: 2 callbacks suppressed [ 832.479649][T19165] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3452'. [ 832.494990][T19165] hsr0: entered promiscuous mode [ 832.500866][T19165] bridge0: port 4(hsr0) entered blocking state [ 832.517991][T19165] bridge0: port 4(hsr0) entered disabled state [ 832.528297][T19165] hsr0: entered allmulticast mode [ 832.547503][T19165] hsr_slave_0: entered allmulticast mode [ 832.567612][T19165] hsr_slave_1: entered allmulticast mode [ 833.117953][T19177] netlink: 'syz.0.3456': attribute type 10 has an invalid length. [ 833.296461][T19188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3454'. [ 833.543734][T19177] hsr0: left allmulticast mode [ 833.556731][T19177] hsr_slave_0: left allmulticast mode [ 833.586740][T19177] hsr_slave_1: left allmulticast mode [ 833.595644][T19177] hsr0: left promiscuous mode [ 833.607481][T19177] bridge0: port 4(hsr0) entered disabled state [ 833.829085][T19177] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 833.856772][T19187] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 834.202593][T19203] ================================================================== [ 834.210909][T19203] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 834.218995][T19203] Write of size 72 at addr ffff88802f5c6210 by task syz.0.3461/19203 [ 834.227151][T19203] [ 834.229567][T19203] CPU: 1 PID: 19203 Comm: syz.0.3461 Not tainted syzkaller #0 [ 834.237026][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.247185][T19203] Call Trace: [ 834.250470][T19203] [ 834.253404][T19203] dump_stack_lvl+0x18c/0x250 [ 834.258101][T19203] ? __lock_acquire+0x7d40/0x7d40 [ 834.263163][T19203] ? show_regs_print_info+0x20/0x20 [ 834.268673][T19203] ? load_image+0x420/0x420 [ 834.273290][T19203] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 834.278855][T19203] ? __virt_addr_valid+0x18c/0x540 [ 834.284009][T19203] ? __virt_addr_valid+0x469/0x540 [ 834.289169][T19203] print_report+0xa8/0x210 [ 834.293610][T19203] ? __bpf_get_stackid+0x6bf/0x900 [ 834.298731][T19203] kasan_report+0x117/0x150 [ 834.303337][T19203] ? __bpf_get_stackid+0x6bf/0x900 [ 834.308562][T19203] kasan_check_range+0x241/0x290 [ 834.313722][T19203] ? __bpf_get_stackid+0x6bf/0x900 [ 834.318869][T19203] __asan_memcpy+0x40/0x70 [ 834.323322][T19203] __bpf_get_stackid+0x6bf/0x900 [ 834.328378][T19203] bpf_get_stackid_pe+0x343/0x410 [ 834.333446][T19203] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 834.338923][T19203] bpf_overflow_handler+0x1fc/0x510 [ 834.344264][T19203] ? bpf_overflow_handler+0xde/0x510 [ 834.349599][T19203] ? tp_perf_event_destroy+0x20/0x20 [ 834.354931][T19203] ? __perf_event_account_interrupt+0x187/0x280 [ 834.361227][T19203] __perf_event_overflow+0x447/0x630 [ 834.366546][T19203] perf_swevent_overflow+0x268/0x340 [ 834.371867][T19203] ? perf_event_switch_output+0x790/0x790 [ 834.377735][T19203] ? rcu_is_watching+0x15/0xb0 [ 834.382610][T19203] perf_swevent_event+0x45c/0x570 [ 834.387944][T19203] ? perf_tp_event+0x1520/0x1520 [ 834.392913][T19203] ___perf_sw_event+0x4a7/0x730 [ 834.397801][T19203] ? ___perf_sw_event+0x199/0x730 [ 834.402932][T19203] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 834.409366][T19203] ? __lock_acquire+0x1347/0x7d40 [ 834.414520][T19203] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 834.420717][T19203] ? lock_chain_count+0x20/0x20 [ 834.425618][T19203] __perf_sw_event+0x139/0x270 [ 834.430411][T19203] do_user_addr_fault+0x123e/0x12c0 [ 834.435781][T19203] ? rcu_is_watching+0x15/0xb0 [ 834.440593][T19203] exc_page_fault+0x64/0x100 [ 834.445324][T19203] asm_exc_page_fault+0x26/0x30 [ 834.450387][T19203] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 834.456250][T19203] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 834.475895][T19203] RSP: 0018:ffffc9000453f798 EFLAGS: 00050206 [ 834.482025][T19203] RAX: ffffffff8427e201 RBX: 0000000000033fe0 RCX: 0000000000033020 [ 834.490023][T19203] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffffc900046e1fc0 [ 834.498023][T19203] RBP: ffffc9000453f8f0 R08: ffffc90004714fdf R09: 1ffff920008e29fb [ 834.506024][T19203] R10: dffffc0000000000 R11: fffff520008e29fc R12: ffffc900046e1000 [ 834.514021][T19203] R13: 0000200000000040 R14: ffffc9000453fe38 R15: 1ffff920008a7fc7 [ 834.522015][T19203] ? _copy_from_iter+0x181/0x12e0 [ 834.527065][T19203] _copy_from_iter+0x24e/0x12e0 [ 834.531935][T19203] ? find_vmap_area+0xfc/0x110 [ 834.536732][T19203] ? __lock_acquire+0x7d40/0x7d40 [ 834.541784][T19203] ? copyout_mc+0x70/0x70 [ 834.546131][T19203] ? do_raw_spin_unlock+0x121/0x230 [ 834.551355][T19203] ? _raw_spin_unlock+0x28/0x40 [ 834.556219][T19203] ? find_vmap_area+0xfc/0x110 [ 834.560994][T19203] ? __check_object_size+0x506/0xa20 [ 834.566291][T19203] netlink_sendmsg+0x76b/0xbf0 [ 834.571083][T19203] ? netlink_getsockopt+0x590/0x590 [ 834.576303][T19203] ? aa_sock_msg_perm+0x94/0x150 [ 834.581254][T19203] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 834.586546][T19203] ? security_socket_sendmsg+0x80/0xa0 [ 834.592052][T19203] ? netlink_getsockopt+0x590/0x590 [ 834.597262][T19203] ____sys_sendmsg+0x5ba/0x960 [ 834.602047][T19203] ? __asan_memset+0x22/0x40 [ 834.606648][T19203] ? __sys_sendmsg_sock+0x30/0x30 [ 834.611676][T19203] ? __import_iovec+0x5f2/0x850 [ 834.616635][T19203] ? import_iovec+0x73/0xa0 [ 834.621229][T19203] ___sys_sendmsg+0x2a6/0x360 [ 834.626001][T19203] ? __sys_sendmsg+0x2a0/0x2a0 [ 834.630786][T19203] __se_sys_sendmsg+0x1c2/0x2b0 [ 834.635643][T19203] ? __x64_sys_sendmsg+0x80/0x80 [ 834.640607][T19203] ? lockdep_hardirqs_on+0x98/0x150 [ 834.645947][T19203] do_syscall_64+0x55/0xa0 [ 834.650455][T19203] ? clear_bhb_loop+0x40/0x90 [ 834.655140][T19203] ? clear_bhb_loop+0x40/0x90 [ 834.659826][T19203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.665755][T19203] RIP: 0033:0x7fdf8e39c819 [ 834.670229][T19203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.690366][T19203] RSP: 002b:00007fdf8f2e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.698877][T19203] RAX: ffffffffffffffda RBX: 00007fdf8e615fa0 RCX: 00007fdf8e39c819 [ 834.706856][T19203] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 834.714922][T19203] RBP: 00007fdf8e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 834.723077][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.731226][T19203] R13: 00007fdf8e616038 R14: 00007fdf8e615fa0 R15: 00007ffe1daf9a48 [ 834.739214][T19203] [ 834.742235][T19203] [ 834.744557][T19203] Allocated by task 19204: [ 834.749077][T19203] kasan_set_track+0x4e/0x70 [ 834.753763][T19203] __kasan_kmalloc+0x8f/0xa0 [ 834.758443][T19203] __kmalloc_node+0xb4/0x230 [ 834.763128][T19203] bpf_map_area_alloc+0x5e/0x110 [ 834.768192][T19203] prealloc_elems_and_freelist+0x86/0x1c0 [ 834.773920][T19203] stack_map_alloc+0x33a/0x4c0 [ 834.778687][T19203] map_create+0x877/0x12f0 [ 834.783106][T19203] __sys_bpf+0x651/0x890 [ 834.787368][T19203] __x64_sys_bpf+0x7c/0x90 [ 834.791794][T19203] do_syscall_64+0x55/0xa0 [ 834.796311][T19203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.802213][T19203] [ 834.804539][T19203] Last potentially related work creation: [ 834.810469][T19203] kasan_save_stack+0x3e/0x60 [ 834.815169][T19203] __kasan_record_aux_stack+0xaf/0xc0 [ 834.820813][T19203] call_rcu+0x153/0x950 [ 834.824985][T19203] nf_unregister_net_hooks+0xcb/0x130 [ 834.830364][T19203] setup_net+0x7e7/0xa30 [ 834.834612][T19203] copy_net_ns+0x36d/0x5e0 [ 834.839166][T19203] create_new_namespaces+0x3d3/0x6f0 [ 834.844456][T19203] copy_namespaces+0x430/0x4a0 [ 834.849221][T19203] copy_process+0x1724/0x3d80 [ 834.853985][T19203] kernel_clone+0x24b/0x8a0 [ 834.858491][T19203] __x64_sys_clone+0x1b7/0x230 [ 834.863257][T19203] do_syscall_64+0x55/0xa0 [ 834.867771][T19203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.873681][T19203] [ 834.876026][T19203] Second to last potentially related work creation: [ 834.882607][T19203] kasan_save_stack+0x3e/0x60 [ 834.887289][T19203] __kasan_record_aux_stack+0xaf/0xc0 [ 834.892767][T19203] call_rcu+0x153/0x950 [ 834.897020][T19203] nf_unregister_net_hooks+0xcb/0x130 [ 834.902485][T19203] nf_ct_netns_put+0x2d2/0x520 [ 834.907350][T19203] nf_conncount_destroy+0x41/0x150 [ 834.912461][T19203] ovs_ct_exit+0x9c/0x200 [ 834.916796][T19203] ovs_exit_net+0xed/0x7a0 [ 834.921229][T19203] setup_net+0x7e7/0xa30 [ 834.925477][T19203] copy_net_ns+0x36d/0x5e0 [ 834.929905][T19203] create_new_namespaces+0x3d3/0x6f0 [ 834.935454][T19203] copy_namespaces+0x430/0x4a0 [ 834.940310][T19203] copy_process+0x1724/0x3d80 [ 834.944995][T19203] kernel_clone+0x24b/0x8a0 [ 834.949514][T19203] __x64_sys_clone+0x1b7/0x230 [ 834.954456][T19203] do_syscall_64+0x55/0xa0 [ 834.959062][T19203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.965046][T19203] [ 834.967375][T19203] The buggy address belongs to the object at ffff88802f5c6200 [ 834.967375][T19203] which belongs to the cache kmalloc-cg-64 of size 64 [ 834.981654][T19203] The buggy address is located 16 bytes inside of [ 834.981654][T19203] allocated 40-byte region [ffff88802f5c6200, ffff88802f5c6228) [ 834.995628][T19203] [ 834.998415][T19203] The buggy address belongs to the physical page: [ 835.004948][T19203] page:ffffea0000bd7180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f5c6 [ 835.015294][T19203] memcg:ffff88801d797401 [ 835.019711][T19203] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 835.027695][T19203] page_type: 0xffffffff() [ 835.032034][T19203] raw: 00fff00000000800 ffff888017c4da00 ffffea00016f6140 dead000000000005 [ 835.040641][T19203] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88801d797401 [ 835.049244][T19203] page dumped because: kasan: bad access detected [ 835.055654][T19203] page_owner tracks the page as allocated [ 835.061368][T19203] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5769, tgid 5769 (syz-executor), ts 87453783124, free_ts 85991507691 [ 835.079887][T19203] post_alloc_hook+0x1c1/0x200 [ 835.084665][T19203] get_page_from_freelist+0x1951/0x19e0 [ 835.090212][T19203] __alloc_pages+0x1f0/0x460 [ 835.094804][T19203] alloc_slab_page+0x5d/0x160 [ 835.099581][T19203] new_slab+0x87/0x2d0 [ 835.103658][T19203] ___slab_alloc+0xc5d/0x12f0 [ 835.108342][T19203] __kmem_cache_alloc_node+0x19e/0x250 [ 835.113807][T19203] __kmalloc_node+0xa4/0x230 [ 835.118491][T19203] kvmalloc_node+0x70/0x180 [ 835.122998][T19203] nf_hook_entries_grow+0x27d/0x6d0 [ 835.128202][T19203] nf_hook_entries_insert_raw+0x4b/0x300 [ 835.133846][T19203] nf_nat_register_fn+0x1d0/0x580 [ 835.138876][T19203] iptable_nat_table_init+0x1f7/0x2d0 [ 835.144273][T19203] xt_find_table_lock+0x306/0x3e0 [ 835.149314][T19203] xt_request_find_table_lock+0x26/0x100 [ 835.155048][T19203] do_ipt_get_ctl+0x717/0x1200 [ 835.159906][T19203] page last free stack trace: [ 835.164583][T19203] free_unref_page_prepare+0x7b2/0x8c0 [ 835.170222][T19203] free_unref_page+0x32/0x2e0 [ 835.175093][T19203] __unfreeze_partials+0x1cf/0x210 [ 835.180230][T19203] put_cpu_partial+0x17c/0x250 [ 835.185008][T19203] __slab_free+0x319/0x400 [ 835.189432][T19203] qlist_free_all+0x75/0xd0 [ 835.193946][T19203] kasan_quarantine_reduce+0x143/0x160 [ 835.199422][T19203] __kasan_slab_alloc+0x22/0x80 [ 835.204275][T19203] slab_post_alloc_hook+0x6e/0x4b0 [ 835.209400][T19203] kmem_cache_alloc+0x11a/0x2d0 [ 835.214263][T19203] __anon_vma_prepare+0x68/0x430 [ 835.219209][T19203] handle_mm_fault+0x40ed/0x4c00 [ 835.224283][T19203] do_user_addr_fault+0x730/0x12c0 [ 835.229433][T19203] exc_page_fault+0x64/0x100 [ 835.234129][T19203] asm_exc_page_fault+0x26/0x30 [ 835.239008][T19203] [ 835.241433][T19203] Memory state around the buggy address: [ 835.247237][T19203] ffff88802f5c6100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 835.255449][T19203] ffff88802f5c6180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 835.263537][T19203] >ffff88802f5c6200: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 835.271609][T19203] ^ [ 835.276992][T19203] ffff88802f5c6280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 835.285210][T19203] ffff88802f5c6300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 835.293289][T19203] ================================================================== [ 835.301369][T19203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 835.308576][T19203] CPU: 1 PID: 19203 Comm: syz.0.3461 Not tainted syzkaller #0 [ 835.316057][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.326140][T19203] Call Trace: [ 835.329432][T19203] [ 835.332370][T19203] dump_stack_lvl+0x18c/0x250 [ 835.337072][T19203] ? show_regs_print_info+0x20/0x20 [ 835.342298][T19203] ? load_image+0x420/0x420 [ 835.346836][T19203] panic+0x2dc/0x730 [ 835.350792][T19203] ? __lock_acquire+0x7d40/0x7d40 [ 835.355925][T19203] ? bpf_jit_dump+0xd0/0xd0 [ 835.360441][T19203] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 835.366351][T19203] ? _raw_spin_unlock+0x40/0x40 [ 835.371209][T19203] ? __bpf_get_stackid+0x6bf/0x900 [ 835.376341][T19203] check_panic_on_warn+0x84/0xa0 [ 835.381288][T19203] ? __bpf_get_stackid+0x6bf/0x900 [ 835.386413][T19203] end_report+0x6f/0x130 [ 835.390662][T19203] kasan_report+0x128/0x150 [ 835.395372][T19203] ? __bpf_get_stackid+0x6bf/0x900 [ 835.400533][T19203] kasan_check_range+0x241/0x290 [ 835.405494][T19203] ? __bpf_get_stackid+0x6bf/0x900 [ 835.410719][T19203] __asan_memcpy+0x40/0x70 [ 835.415216][T19203] __bpf_get_stackid+0x6bf/0x900 [ 835.420219][T19203] bpf_get_stackid_pe+0x343/0x410 [ 835.425276][T19203] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 835.430745][T19203] bpf_overflow_handler+0x1fc/0x510 [ 835.435961][T19203] ? bpf_overflow_handler+0xde/0x510 [ 835.441257][T19203] ? tp_perf_event_destroy+0x20/0x20 [ 835.446560][T19203] ? __perf_event_account_interrupt+0x187/0x280 [ 835.452814][T19203] __perf_event_overflow+0x447/0x630 [ 835.458113][T19203] perf_swevent_overflow+0x268/0x340 [ 835.463415][T19203] ? perf_event_switch_output+0x790/0x790 [ 835.469153][T19203] ? rcu_is_watching+0x15/0xb0 [ 835.473923][T19203] perf_swevent_event+0x45c/0x570 [ 835.478959][T19203] ? perf_tp_event+0x1520/0x1520 [ 835.484018][T19203] ___perf_sw_event+0x4a7/0x730 [ 835.488906][T19203] ? ___perf_sw_event+0x199/0x730 [ 835.494048][T19203] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 835.500525][T19203] ? __lock_acquire+0x1347/0x7d40 [ 835.505662][T19203] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 835.511646][T19203] ? lock_chain_count+0x20/0x20 [ 835.516627][T19203] __perf_sw_event+0x139/0x270 [ 835.521402][T19203] do_user_addr_fault+0x123e/0x12c0 [ 835.526695][T19203] ? rcu_is_watching+0x15/0xb0 [ 835.531559][T19203] exc_page_fault+0x64/0x100 [ 835.536156][T19203] asm_exc_page_fault+0x26/0x30 [ 835.541014][T19203] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 835.547089][T19203] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 835.566796][T19203] RSP: 0018:ffffc9000453f798 EFLAGS: 00050206 [ 835.572955][T19203] RAX: ffffffff8427e201 RBX: 0000000000033fe0 RCX: 0000000000033020 [ 835.581022][T19203] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffffc900046e1fc0 [ 835.589045][T19203] RBP: ffffc9000453f8f0 R08: ffffc90004714fdf R09: 1ffff920008e29fb [ 835.597026][T19203] R10: dffffc0000000000 R11: fffff520008e29fc R12: ffffc900046e1000 [ 835.605065][T19203] R13: 0000200000000040 R14: ffffc9000453fe38 R15: 1ffff920008a7fc7 [ 835.613155][T19203] ? _copy_from_iter+0x181/0x12e0 [ 835.618317][T19203] _copy_from_iter+0x24e/0x12e0 [ 835.623182][T19203] ? find_vmap_area+0xfc/0x110 [ 835.628214][T19203] ? __lock_acquire+0x7d40/0x7d40 [ 835.633386][T19203] ? copyout_mc+0x70/0x70 [ 835.637899][T19203] ? do_raw_spin_unlock+0x121/0x230 [ 835.643193][T19203] ? _raw_spin_unlock+0x28/0x40 [ 835.648058][T19203] ? find_vmap_area+0xfc/0x110 [ 835.652836][T19203] ? __check_object_size+0x506/0xa20 [ 835.658130][T19203] netlink_sendmsg+0x76b/0xbf0 [ 835.662909][T19203] ? netlink_getsockopt+0x590/0x590 [ 835.668398][T19203] ? aa_sock_msg_perm+0x94/0x150 [ 835.673352][T19203] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 835.678816][T19203] ? security_socket_sendmsg+0x80/0xa0 [ 835.684286][T19203] ? netlink_getsockopt+0x590/0x590 [ 835.689688][T19203] ____sys_sendmsg+0x5ba/0x960 [ 835.694558][T19203] ? __asan_memset+0x22/0x40 [ 835.699154][T19203] ? __sys_sendmsg_sock+0x30/0x30 [ 835.704273][T19203] ? __import_iovec+0x5f2/0x850 [ 835.709219][T19203] ? import_iovec+0x73/0xa0 [ 835.713723][T19203] ___sys_sendmsg+0x2a6/0x360 [ 835.718496][T19203] ? __sys_sendmsg+0x2a0/0x2a0 [ 835.723277][T19203] __se_sys_sendmsg+0x1c2/0x2b0 [ 835.728134][T19203] ? __x64_sys_sendmsg+0x80/0x80 [ 835.733132][T19203] ? lockdep_hardirqs_on+0x98/0x150 [ 835.738338][T19203] do_syscall_64+0x55/0xa0 [ 835.742759][T19203] ? clear_bhb_loop+0x40/0x90 [ 835.747530][T19203] ? clear_bhb_loop+0x40/0x90 [ 835.752311][T19203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.758214][T19203] RIP: 0033:0x7fdf8e39c819 [ 835.762633][T19203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.782352][T19203] RSP: 002b:00007fdf8f2e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.790873][T19203] RAX: ffffffffffffffda RBX: 00007fdf8e615fa0 RCX: 00007fdf8e39c819 [ 835.798849][T19203] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 835.806822][T19203] RBP: 00007fdf8e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 835.814897][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.823047][T19203] R13: 00007fdf8e616038 R14: 00007fdf8e615fa0 R15: 00007ffe1daf9a48 [ 835.831079][T19203] [ 835.834548][T19203] Kernel Offset: disabled [ 835.838881][T19203] Rebooting in 86400 seconds..