last executing test programs: 5.233757501s ago: executing program 3 (id=10704): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60a0100003f000005000b00000000001801000020646c2500000000002020207b9af8ff000000000c9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000004e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.796955441s ago: executing program 3 (id=10707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) socket$kcm(0x11, 0x200000000000003, 0x300) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2b, 0x0}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) socket$kcm(0x10, 0x400000002, 0x0) 4.495797659s ago: executing program 0 (id=10710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) socketpair(0xb, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f00000020c0)}, 0x120e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.43692332s ago: executing program 0 (id=10711): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000340)={0x2, 0x80, 0x2, 0x1, 0x0, 0x40, 0x0, 0x3, 0x8000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x5, 0x5}, 0x100, 0x7, 0x2, 0x4, 0x2, 0x6, 0x84c, 0x0, 0x3, 0x0, 0x7}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x541b, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4904100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 4.268800035s ago: executing program 1 (id=10713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc67357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9ec7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dca20563e1c1e7624cc3b88b330ad416c4c1d8c60589b6445a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843240000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a0af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c500"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) sendmsg$inet(r5, &(0x7f0000001fc0)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="ec7d1055c70e74f7ed1a727f55451e628bdae636747a27a76bd12895b2892e31f6970e6f51fcebdad631666052356b1be95d00b35a6558c6b5f072708010da712f2491b09f39f8e975347c7089a1f29ae4ae51dfe3fce5642c06e577b2e9008595", 0x61}, {&(0x7f0000001a80)="8dea8ac9ac248fa3657688770946c90a9d6019da6071f3d122b6ef3f9f8b3c2ce318edc11b4a68184ee9eb508447266588b9cc92171c0ac98f20366b1295024dc5bfbdc9dafbc70636994a629dd6a6032b04c60d0ac5423c6e555949e322e2fee87393e1cd3766f3fc09bf7fde0c4b5dfbaee668437e0545a1366da8b23001b6bcea932d8f0dc902e39649cbb2d453c6896668bd5da669de0a4fab6ddffe6e6701905fc97d8dfe0648", 0xa9}, {&(0x7f0000001b40)="e83741bf7646c5dae7b3f116f55491", 0xf}, {&(0x7f0000001b80)="242017a7e25487913611641ce229f6a3a91629d5d8094500ddf4177558069e48fca49fcf8b8f48bd589a5fa368036463e2b9b8786bf250b5c3235e82031a31af694cfea0888ede1e7bf47291917d1906771b0c32244df79758afaaafa9923a69d18539243417ae632d5b96bc4a64c204135ab74667b53eaa80edf71a08cb6beff875a7b5", 0x84}, {&(0x7f0000002100)="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", 0x103}, {&(0x7f0000001d40)="b02fddeaba1b098eeab5ed79bdcfdc718d1a29afdf9f7b294570149a012ee4f5cede278bfc16ff166fa6a778ef0bab785e6c06c90baeb1da7346dd603c3b2a33e9587316b2c543412c96c29e81c519aba52f6c6f398dc0b18ab7638c3d56ce40e84c410a7195a56448623797164606134c4125e854618596828500fca72644f5ec0d6498296faa25bb4be950b2e467354dec93", 0x93}, {&(0x7f0000001e00)="60c8cf2c0c2d8d46cca56de15cc44ca26e4dad30d0ddbbac3f6c15d3877bb2b9df5415eb46ab500a16cf552982f27227f486261fed8cc2342ff08e08570bfed8296efbb7f7131938fd86aa79cf859619184960caba2bbe3d9f9e", 0x5a}], 0x8, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x10}}, @ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xd, 0x2, [{0x0, 0x7, "89da195e9e"}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @remote}}}], 0x88}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1}, 0x50) (async) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = getpid() syz_open_procfs$namespace(r10, &(0x7f0000000780)='ns/net\x00') (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f4, &(0x7f0000000080)) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 3.896701324s ago: executing program 1 (id=10715): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60a01000040000005000b00000000001801000020646c2500000000002020207b9af8ff000000000c9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000004e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.831892735s ago: executing program 3 (id=10716): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='c 7', @ANYRESDEC=0x0], 0x9) 3.751645827s ago: executing program 1 (id=10717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) sendmsg$inet(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)="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", 0x593}], 0x1}, 0x4044004) 3.688464999s ago: executing program 0 (id=10718): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x71b882, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000e27f000003"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x5, 0x6, 0x8, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r2, @ANYBLOB="0d00400000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xed, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg(r5, &(0x7f0000001d40)={&(0x7f00000005c0)=@xdp={0x2c, 0xb, r6, 0x8}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000640)="ec8bfc76eebf9af249d2233dd37aed2de8ad9e25f3c22663d6548d33396d888fbb6700f5ae1f27d5", 0x28}, {&(0x7f0000000680)="dfb29a7b249159a87d5b872179874ea41b801cf6127e2751e4c80c5fd8a387499d9e5332f33a0a8a9fd26f5b944436580fd172c279cbe90f1a50d6eb3d7c1ed9e4ebfaf955111ae398e156bff6ebd8c38fc16b8fb0d20d311f2fb389ca1458cf4d3dbf38881b67321d4c239fed29599d97ee7685b3cd9dc695e33437e1337abc94e0fad50bd27a157322e7a0451ebc11f94a2a90656b1f330d1580a034c55d92f12b974432ad5a340445658525fba336d72d5087a227", 0xb6}, {&(0x7f0000000a80)="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", 0xff}], 0x3, &(0x7f0000000c00)=[{0x60, 0x113, 0x9, "e484c2542a654e8aa871ef3248dd1bcc44c767d8780f718cec9b49d0e3925e9d0715a6e165790bf183cb4d1f7b95765b832b474863293dca18d4e968bf0be7655d2f54a943a8d272e85d47292711"}, {0x1000, 0x0, 0xfbc4, "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"}], 0x1060}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x300, 0x1}, 0x50) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001f00), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002b00)={0xd, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180100000001000066ece0000000000004000018", @ANYRES32, @ANYBLOB="00000000100000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x79, &(0x7f0000001e40)=""/121, 0x51767b7e8f06577c, 0x2, '\x00', r6, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001ec0)={0x2, 0x6, 0x7fc00000, 0x5}, 0x10, r7, r8, 0x1, &(0x7f0000001f40)=[r9, r9, r10, r9], &(0x7f0000002ac0)=[{0x1, 0x3, 0xd, 0x7}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1a, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x28e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xf, 0x8, 0xa, 0xffffffffffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0xc7, &(0x7f00000004c0)=""/199, 0x40f00, 0x4, '\x00', r4, 0x25, r10, 0x8, &(0x7f0000000700)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x6, 0x914, 0x7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000007c0)=[{0x4, 0x3, 0x8a, 0xb}, {0x3, 0x5, 0xa, 0x5}, {0x1, 0x2, 0x5}, {0x3, 0x5, 0xf, 0xa}, {0x1, 0x5, 0xb, 0x8}, {0x2, 0x1, 0xa, 0x4}], 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0xffffffff}, {0x3d}, {0x2}, {0x6}]}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) 3.64402231s ago: executing program 2 (id=10719): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) socketpair(0xb, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f00000020c0)}, 0x120e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.467865444s ago: executing program 3 (id=10720): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x1188c, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2f, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x1, 0x4, 0x4, 0x3}}, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040054) r3 = socket$kcm(0xa, 0x5, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, &(0x7f0000000100), 0x129) 3.288818929s ago: executing program 0 (id=10721): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800007734fc02d156a7001700004d00000000001100000023000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) 3.288272279s ago: executing program 2 (id=10722): socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000700850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8c20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x10089, 0x1a3a, 0x0, 0x4, 0x1, 0x3, 0x1}, 0x0, 0x80000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xff, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x9b, 0x2, 0x0, 0x0, 0x0, 0x5, 0xa4004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b90, 0x0, 0xfffffffe, 0x3, 0xffffffffffffff01, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xc, 0x8, 0x0, 0x0, 0x9, 0x90200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bc76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="d335e9754aec2fe7", 0x8}, {&(0x7f00000002c0)="089a289ab1902945ba52795bead6fbf78688457d761a146b4e8118", 0x1b}, {&(0x7f0000000580)="6152121157d3dc7d6ace2d9553674c6752536e4d31f75948ec3c0e73df4db93f4afe09251f3cc1e8c901aab1d0f7b7fdce0d9522171c292d26c0b058d687961d96581c3e0df022e366e8ede4ad0b802522166f35eaed0597a74e9b76e5a1d207ff4aa1177ef93fba434820d509d351e3bd2e360321d2d74d7782740fe2a2e859af959f8a66509cc371143c461426485acb628fbac759ba749bbed1c18e7a776c2d32c94eafee1af21e90365a362a1fdbd9d73009274cc9c8479d809c31a8eadb2c7d4391cab0", 0xc6}, {&(0x7f0000000680)="aa2d7ce94267c34580674954637bc8a901", 0x11}], 0x4}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) (rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES16=r3, @ANYBLOB="020000"], 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) (async, rerun: 32) socketpair(0x29, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 3.265244579s ago: executing program 1 (id=10723): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b4002b7d5ecc56ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) close(r9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x80000000, 0xc}, {0x1000000a, 0x84}], 0x10, 0x4}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x1c) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0x24, 0x4, 0xe1f, 0x0, r6}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r11, &(0x7f0000000240), &(0x7f0000000540)=""/32}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) 3.193539841s ago: executing program 3 (id=10724): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r2, 0x0, 0xffdd) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="01d62b4a3d72dde3457ac39beae24a9ed84ebc033d010a9e844b05216e33d7d40ffa0208", 0x24}, {0x0}, {&(0x7f0000000140)="e2c85402000000e210852bb83ba8e93a38adc6dcaf2a149851d8764aca883a399da50ea002a7f1f9b614e890fced6d1f368d20eda7d48ae5f5d862aaa40c935c5ced8c098eb37e4aedae2998574ec5b4538ee3275362ef73a2d93a29ab647d06d133d4eeb228f80764f99fee8f99cdc7c427264e90d2e5c706d09707cd49458ba86bf2cb73fd8855bb685b8dc5096bad1d83e760a72aaea5123f61dec58922694d07fb94471b8247e39f733d1388e796c9d5763de2f9e009e5ceeaf86c457fcc61a5f06b3e4b1e7911374456e9c4b3e7a0", 0xd1}], 0x3}, 0x20004090) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)={r4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x29, 0x5, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffe3}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="0d1bca146844268cb8be14f086dd", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.105950304s ago: executing program 0 (id=10725): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) 3.105508944s ago: executing program 2 (id=10726): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60a01000041000005000b00000000001801000020646c2500000000002020207b9af8ff000000000c9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000004e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.969161087s ago: executing program 1 (id=10727): r0 = socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0xf, 0x3, 0x2) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x16efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10014, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x2d15}, 0x0, 0x8000000, 0x0, 0x0, 0x3, 0x3, 0x1}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="1400000028004b00cc69cf73577814970686eb87", 0x14}], 0x1}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000c8000000c8"], 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) (async) recvmsg$unix(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20000100) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x1, 0x3, 0xfffff034}, {0x16, 0xfb, 0x1, 0xfffffffb}]}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x894b, &(0x7f0000000140)) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x7, 0x4, 0x6, 0x0, r8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xffffffffffffff2d, &(0x7f0000000000), 0x1}, 0x5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000036000511d25a80698c6394090324fc602f6e35400800018025581d00d1bd00000000000000000000000f05", 0x2f}], 0x1, 0x0, 0x0, 0x39c}, 0x4040014) 2.939442377s ago: executing program 2 (id=10728): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='c 7', @ANYRESDEC=0x0], 0x9) 120.765877ms ago: executing program 1 (id=10729): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r2, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f", 0x51}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xad44d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x43, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000eb47493c00"/26], 0x48) 119.540357ms ago: executing program 2 (id=10730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) socketpair(0xb, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f00000020c0)}, 0x120e1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 116.098817ms ago: executing program 0 (id=10737): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}}, 0x0, 0xffffffffffffffff, r6, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000046c0)={&(0x7f0000002580)="3b37057ac6db1d8a55b7d1a024e83708e7f163b6e7f68e8938ad82038bb9fe4d550f2db09909adcf083a14bb9041cb30a824a92c7d4448ee5d1f4f3da6db72ed12887c71fa9eeadf1426", 0x0, &(0x7f0000003680)="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", &(0x7f0000004680)="2f214082f467bd2b56a9123632808cb65e4670900f3ef228717b8b9782672689125d5a8c", 0x8001, r5, 0x4}, 0x38) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 8.51922ms ago: executing program 3 (id=10731): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="ffffffff456252971c63159300"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0x70bf}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000203}, 0x10f04, 0x0, 0x0, 0x0, 0x2, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000008908630b4d7d11"], 0x18, 0x5}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d0002840600ffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20020044) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x2, 0x3, 0x84) r6 = socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r6], 0x48}, 0x20028814) (async) perf_event_open$cgroup(&(0x7f0000000580)={0x4, 0x80, 0x8, 0x9, 0x3, 0xfe, 0x0, 0x7fffffff, 0xa10a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000380), 0x11}, 0x13000, 0x86, 0x16, 0x5, 0x8, 0x2, 0x4, 0x0, 0x3, 0x0, 0x5b9f800000000}, 0xffffffffffffffff, 0x3, r3, 0xa) 0s ago: executing program 2 (id=10732): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x1000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x19c565, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x2a01, 0xfffffffffffffffc, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x101000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffe81, &(0x7f0000000080)=[{&(0x7f00000001c0)="2e00000011008108090f9becdb4cb93a0a4831371400000069bf6efb2502eaf60d000300020400bf0500050012012aafd3ea5b2ed0ad9748d56088f60cf288b8542559647f461b2e4ac373244f7399b8450bca29090089ea20692ff0179b90d1b621e488e614f114b07324296fd258b428fcb7a3a9086379a0db8979104278262ff77275d551b7f0c70763699bae60f43e6ae6780bcc03be4bdf2bd749f927d537889c2c7a713b377e739b4e037ebf27a367999c0ba9111384e3c9350e0844d64cc1dabd2323a73e072be991603a893464e5f9697139ae", 0xd7}], 0x1, 0x0, 0x0, 0xfeffffff}, 0xc0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000000)) recvmsg(r3, &(0x7f00000019c0)={&(0x7f0000000340)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/245, 0xf5}, {&(0x7f00000006c0)=""/19, 0x13}, {&(0x7f0000000700)=""/83, 0x53}, {&(0x7f0000000780)=""/8, 0x8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/155, 0x9b}], 0xa, &(0x7f0000001940)=""/108, 0x6c}, 0x40002042) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x1, 0xb, 0x10, 0x0, 0x25f10000000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x5}, 0x404, 0xfffffffffffffffe, 0x0, 0x2, 0xc3f, 0x1, 0x3ff, 0x0, 0xffff, 0x0, 0x100}, 0xffffffffffffffff, 0xc, r0, 0x2) kernel console output (not intermixed with test programs): 68/0xd2 [ 1821.848559][ T6063] RIP: 0033:0x7f2aa179e159 [ 1821.852973][ T6063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.872575][ T6063] RSP: 002b:00007f2aa25f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1821.880983][ T6063] RAX: ffffffffffffffda RBX: 00007f2aa1a25fa0 RCX: 00007f2aa179e159 [ 1821.888949][ T6063] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 1821.896918][ T6063] RBP: 00007f2aa25f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.904885][ T6063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1821.912848][ T6063] R13: 00007f2aa1a26038 R14: 00007f2aa1a25fa0 R15: 00007ffd5892c828 [ 1821.920828][ T6063] [ 1821.953381][ T6063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1821.971296][ T6070] mac80211_hwsim hwsim121 wlan0: left promiscuous mode [ 1821.985301][ T6070] mac80211_hwsim hwsim121 wlan0: left allmulticast mode [ 1822.174575][ T6083] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9360'. [ 1822.822516][ T6099] netlink: 'syz.1.9366': attribute type 9 has an invalid length. [ 1822.836576][ T6099] netlink: 'syz.1.9366': attribute type 23 has an invalid length. [ 1822.853043][ T6099] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1823.153605][ T6113] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9370'. [ 1824.162639][ T6152] netlink: 'syz.0.9382': attribute type 29 has an invalid length. [ 1824.181546][ T6152] __nla_validate_parse: 2 callbacks suppressed [ 1824.181579][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1824.256752][ T6152] netlink: 'syz.0.9382': attribute type 29 has an invalid length. [ 1824.264913][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1824.550934][ T6162] netlink: 'syz.1.9385': attribute type 1 has an invalid length. [ 1824.561140][ T6162] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1824.613511][ T6166] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9387'. [ 1825.774462][ T6199] netlink: 'syz.3.9395': attribute type 39 has an invalid length. [ 1826.336781][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9402'. [ 1827.101041][ T6241] netlink: 'syz.3.9408': attribute type 33 has an invalid length. [ 1827.116703][ T6241] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9408'. [ 1827.155099][ T6241] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1827.468647][ T6256] FAULT_INJECTION: forcing a failure. [ 1827.468647][ T6256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1827.522081][ T6256] CPU: 0 PID: 6256 Comm: syz.2.9412 Not tainted syzkaller #0 [ 1827.529516][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1827.539600][ T6256] Call Trace: [ 1827.542892][ T6256] [ 1827.545840][ T6256] dump_stack_lvl+0x18c/0x250 [ 1827.550547][ T6256] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1827.556727][ T6256] ? show_regs_print_info+0x20/0x20 [ 1827.561948][ T6256] ? load_image+0x420/0x420 [ 1827.566490][ T6256] should_fail_ex+0x394/0x4c0 [ 1827.571197][ T6256] _copy_from_user+0x2f/0xe0 [ 1827.575813][ T6256] dev_ethtool+0xc6/0x18d0 [ 1827.580272][ T6256] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1827.586546][ T6256] ? __lock_acquire+0x7d80/0x7d80 [ 1827.591591][ T6256] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1827.597073][ T6256] ? full_name_hash+0x92/0xe0 [ 1827.601776][ T6256] ? dev_load+0x21/0x1f0 [ 1827.606046][ T6256] dev_ioctl+0x392/0x1140 [ 1827.610402][ T6256] sock_do_ioctl+0x239/0x310 [ 1827.615021][ T6256] ? sock_show_fdinfo+0xb0/0xb0 [ 1827.619909][ T6256] sock_ioctl+0x5be/0x7e0 [ 1827.624262][ T6256] ? sock_poll+0x3e0/0x3e0 [ 1827.628715][ T6256] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1827.633674][ T6256] ? security_file_ioctl+0x80/0xa0 [ 1827.638810][ T6256] ? sock_poll+0x3e0/0x3e0 [ 1827.643252][ T6256] __se_sys_ioctl+0xfd/0x170 [ 1827.647870][ T6256] do_syscall_64+0x55/0xb0 [ 1827.652313][ T6256] ? clear_bhb_loop+0x40/0x90 [ 1827.657006][ T6256] ? clear_bhb_loop+0x40/0x90 [ 1827.661682][ T6256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1827.667571][ T6256] RIP: 0033:0x7f8f7319e159 [ 1827.671980][ T6256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.691582][ T6256] RSP: 002b:00007f8f7402a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1827.699993][ T6256] RAX: ffffffffffffffda RBX: 00007f8f73425fa0 RCX: 00007f8f7319e159 [ 1827.707963][ T6256] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 1827.715925][ T6256] RBP: 00007f8f7402a090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.723887][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.731851][ T6256] R13: 00007f8f73426038 R14: 00007f8f73425fa0 R15: 00007ffe348aa738 [ 1827.739827][ T6256] [ 1830.364515][ T6261] netlink: 'syz.2.9413': attribute type 10 has an invalid length. [ 1830.387451][ T6261] macvlan0: entered promiscuous mode [ 1830.410166][ T6261] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1830.997241][ T6283] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1831.008167][ T6287] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9422'. [ 1831.186915][ T6297] netlink: 'syz.3.9424': attribute type 29 has an invalid length. [ 1831.653520][ T6289] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9421'. [ 1831.674285][ T6297] netlink: 'syz.3.9424': attribute type 29 has an invalid length. [ 1831.715623][ T6295] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.9425'. [ 1831.754176][ T6299] netlink: 'syz.3.9424': attribute type 29 has an invalid length. [ 1831.885066][T31196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1833.165533][ T6336] FAULT_INJECTION: forcing a failure. [ 1833.165533][ T6336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1833.182521][ T6336] CPU: 1 PID: 6336 Comm: syz.3.9436 Not tainted syzkaller #0 [ 1833.189923][ T6336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1833.199994][ T6336] Call Trace: [ 1833.203280][ T6336] [ 1833.206225][ T6336] dump_stack_lvl+0x18c/0x250 [ 1833.210930][ T6336] ? show_regs_print_info+0x20/0x20 [ 1833.216155][ T6336] ? load_image+0x420/0x420 [ 1833.220681][ T6336] ? __lock_acquire+0x7d80/0x7d80 [ 1833.225725][ T6336] ? snprintf+0xe9/0x140 [ 1833.230015][ T6336] should_fail_ex+0x394/0x4c0 [ 1833.234714][ T6336] _copy_to_user+0x2f/0xa0 [ 1833.239150][ T6336] simple_read_from_buffer+0xe7/0x150 [ 1833.244544][ T6336] proc_fail_nth_read+0x1e8/0x260 [ 1833.249597][ T6336] ? proc_fault_inject_write+0x360/0x360 [ 1833.255254][ T6336] ? fsnotify_perm+0x271/0x5e0 [ 1833.260044][ T6336] ? proc_fault_inject_write+0x360/0x360 [ 1833.265706][ T6336] vfs_read+0x298/0x990 [ 1833.269891][ T6336] ? kernel_read+0x1e0/0x1e0 [ 1833.274497][ T6336] ? __fget_files+0x28/0x460 [ 1833.279104][ T6336] ? __fget_files+0x3fc/0x460 [ 1833.283815][ T6336] ? __fdget_pos+0x2a3/0x330 [ 1833.288421][ T6336] ? ksys_read+0x74/0x260 [ 1833.292776][ T6336] ksys_read+0x151/0x260 [ 1833.297044][ T6336] ? vfs_write+0x9a0/0x9a0 [ 1833.301494][ T6336] ? lockdep_hardirqs_on+0x98/0x150 [ 1833.306723][ T6336] do_syscall_64+0x55/0xb0 [ 1833.311157][ T6336] ? clear_bhb_loop+0x40/0x90 [ 1833.315852][ T6336] ? clear_bhb_loop+0x40/0x90 [ 1833.320549][ T6336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1833.326454][ T6336] RIP: 0033:0x7f255175e98e [ 1833.330881][ T6336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1833.350503][ T6336] RSP: 002b:00007f254f9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1833.358935][ T6336] RAX: ffffffffffffffda RBX: 00007f254f9f66c0 RCX: 00007f255175e98e [ 1833.366925][ T6336] RDX: 000000000000000f RSI: 00007f254f9f60a0 RDI: 0000000000000007 [ 1833.374908][ T6336] RBP: 00007f254f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.382904][ T6336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1833.390884][ T6336] R13: 00007f2551a26038 R14: 00007f2551a25fa0 R15: 00007ffd1381b2e8 [ 1833.398887][ T6336] [ 1833.528018][ T6341] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9439'. [ 1833.569363][ T6341] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1836.299316][ T6391] sock: sock_set_timeout: `syz.0.9455' (pid 6391) tries to set negative timeout [ 1836.447787][ T6402] FAULT_INJECTION: forcing a failure. [ 1836.447787][ T6402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.472374][ T6402] CPU: 1 PID: 6402 Comm: syz.2.9460 Not tainted syzkaller #0 [ 1836.479795][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1836.489866][ T6402] Call Trace: [ 1836.493156][ T6402] [ 1836.496104][ T6402] dump_stack_lvl+0x18c/0x250 [ 1836.500819][ T6402] ? show_regs_print_info+0x20/0x20 [ 1836.506039][ T6402] ? load_image+0x420/0x420 [ 1836.510568][ T6402] ? __lock_acquire+0x7d80/0x7d80 [ 1836.515621][ T6402] ? __might_fault+0xaa/0x120 [ 1836.520315][ T6402] ? full_name_hash+0x92/0xe0 [ 1836.525014][ T6402] should_fail_ex+0x394/0x4c0 [ 1836.529719][ T6402] _copy_to_user+0x2f/0xa0 [ 1836.534158][ T6402] put_user_ifreq+0x78/0xb0 [ 1836.538684][ T6402] sock_do_ioctl+0x268/0x310 [ 1836.543298][ T6402] ? sock_show_fdinfo+0xb0/0xb0 [ 1836.548172][ T6402] sock_ioctl+0x5be/0x7e0 [ 1836.552502][ T6402] ? sock_poll+0x3e0/0x3e0 [ 1836.556929][ T6402] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1836.561859][ T6402] ? security_file_ioctl+0x80/0xa0 [ 1836.566967][ T6402] ? sock_poll+0x3e0/0x3e0 [ 1836.571381][ T6402] __se_sys_ioctl+0xfd/0x170 [ 1836.575971][ T6402] do_syscall_64+0x55/0xb0 [ 1836.580382][ T6402] ? clear_bhb_loop+0x40/0x90 [ 1836.585050][ T6402] ? clear_bhb_loop+0x40/0x90 [ 1836.589723][ T6402] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1836.595610][ T6402] RIP: 0033:0x7f8f7319e159 [ 1836.600020][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.619655][ T6402] RSP: 002b:00007f8f7402a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1836.628068][ T6402] RAX: ffffffffffffffda RBX: 00007f8f73425fa0 RCX: 00007f8f7319e159 [ 1836.636037][ T6402] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 1836.644000][ T6402] RBP: 00007f8f7402a090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.651971][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.659939][ T6402] R13: 00007f8f73426038 R14: 00007f8f73425fa0 R15: 00007ffe348aa738 [ 1836.667921][ T6402] [ 1838.231157][ T6444] FAULT_INJECTION: forcing a failure. [ 1838.231157][ T6444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1838.299947][ T6444] CPU: 0 PID: 6444 Comm: syz.0.9472 Not tainted syzkaller #0 [ 1838.307388][ T6444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1838.317452][ T6444] Call Trace: [ 1838.320728][ T6444] [ 1838.323653][ T6444] dump_stack_lvl+0x18c/0x250 [ 1838.328335][ T6444] ? asm_common_interrupt+0x26/0x40 [ 1838.333536][ T6444] ? show_regs_print_info+0x20/0x20 [ 1838.338729][ T6444] ? load_image+0x420/0x420 [ 1838.343233][ T6444] should_fail_ex+0x394/0x4c0 [ 1838.347911][ T6444] _copy_to_user+0x2f/0xa0 [ 1838.352322][ T6444] simple_read_from_buffer+0xe7/0x150 [ 1838.357694][ T6444] proc_fail_nth_read+0x1e8/0x260 [ 1838.362717][ T6444] ? proc_fault_inject_write+0x360/0x360 [ 1838.368350][ T6444] ? fsnotify_perm+0x271/0x5e0 [ 1838.373111][ T6444] ? proc_fault_inject_write+0x360/0x360 [ 1838.378738][ T6444] vfs_read+0x298/0x990 [ 1838.382897][ T6444] ? kernel_read+0x1e0/0x1e0 [ 1838.387485][ T6444] ? __fget_files+0x28/0x460 [ 1838.392071][ T6444] ? __fget_files+0x3fc/0x460 [ 1838.396760][ T6444] ? __fdget_pos+0x2a3/0x330 [ 1838.401345][ T6444] ? ksys_read+0x74/0x260 [ 1838.405673][ T6444] ksys_read+0x151/0x260 [ 1838.409913][ T6444] ? vfs_write+0x9a0/0x9a0 [ 1838.414331][ T6444] ? lockdep_hardirqs_on+0x98/0x150 [ 1838.419530][ T6444] do_syscall_64+0x55/0xb0 [ 1838.423938][ T6444] ? clear_bhb_loop+0x40/0x90 [ 1838.428615][ T6444] ? clear_bhb_loop+0x40/0x90 [ 1838.433288][ T6444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1838.439178][ T6444] RIP: 0033:0x7f2aa175e98e [ 1838.443586][ T6444] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1838.463192][ T6444] RSP: 002b:00007f2aa25effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1838.471602][ T6444] RAX: ffffffffffffffda RBX: 00007f2aa25f06c0 RCX: 00007f2aa175e98e [ 1838.479566][ T6444] RDX: 000000000000000f RSI: 00007f2aa25f00a0 RDI: 0000000000000008 [ 1838.487528][ T6444] RBP: 00007f2aa25f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1838.495490][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1838.503449][ T6444] R13: 00007f2aa1a26038 R14: 00007f2aa1a25fa0 R15: 00007ffd5892c828 [ 1838.511431][ T6444] [ 1838.539191][ T6450] netlink: 'syz.1.9474': attribute type 21 has an invalid length. [ 1838.547172][ T6450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9474'. [ 1839.742655][ T6469] netlink: 'syz.3.9481': attribute type 29 has an invalid length. [ 1839.748297][ T6463] syzkaller0: entered promiscuous mode [ 1839.760856][ T6463] syzkaller0: entered allmulticast mode [ 1839.792131][ T6469] netlink: 'syz.3.9481': attribute type 29 has an invalid length. [ 1839.809493][ T6473] netlink: 'syz.3.9481': attribute type 29 has an invalid length. [ 1839.824331][ T6469] netlink: 'syz.3.9481': attribute type 29 has an invalid length. [ 1844.419750][ T6503] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1844.429775][ T6522] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.9496'. [ 1844.453601][ T6525] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.9496'. [ 1844.565275][ T6534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9499'. [ 1845.330331][ T6562] netlink: 'syz.1.9507': attribute type 1 has an invalid length. [ 1845.348576][ T6562] netlink: 63743 bytes leftover after parsing attributes in process `syz.1.9507'. [ 1845.379457][ T6562] netlink: 'syz.1.9507': attribute type 29 has an invalid length. [ 1845.405659][ T6562] netlink: 'syz.1.9507': attribute type 3 has an invalid length. [ 1845.427678][ T6562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9507'. [ 1846.246291][ T6586] netlink: 'syz.2.9516': attribute type 6 has an invalid length. [ 1846.254069][ T6586] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9516'. [ 1846.446467][ T6588] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9517'. [ 1846.455847][ T6588] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1846.848411][ T6604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9518'. [ 1847.017150][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9520'. [ 1848.539345][ T6646] syzkaller0: entered promiscuous mode [ 1848.544929][ T6646] syzkaller0: entered allmulticast mode [ 1848.659329][ T6646] netlink: 'syz.2.9534': attribute type 17 has an invalid length. [ 1848.696428][ T6646] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1851.897422][ T6664] netlink: 'syz.1.9538': attribute type 21 has an invalid length. [ 1851.905778][ T6664] __nla_validate_parse: 3 callbacks suppressed [ 1851.905793][ T6664] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9538'. [ 1851.925845][ T6666] netlink: 'syz.1.9538': attribute type 21 has an invalid length. [ 1851.936507][ T6666] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9538'. [ 1852.202642][ T6687] netlink: 'syz.3.9544': attribute type 10 has an invalid length. [ 1852.306812][ T6688] delete_channel: no stack [ 1852.989752][ T6709] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9547'. [ 1853.046666][ T6709] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1853.256217][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.262618][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.328454][ T6696] netlink: 'syz.0.9546': attribute type 12 has an invalid length. [ 1854.415409][ T6696] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9546'. [ 1854.882024][ T6718] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.9550'. [ 1855.463376][ T6724] syzkaller0: entered promiscuous mode [ 1855.480153][ T6724] syzkaller0: entered allmulticast mode [ 1855.493175][ T6729] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9555'. [ 1859.484375][ T6739] netlink: 'syz.3.9558': attribute type 63 has an invalid length. [ 1859.508095][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9558'. [ 1860.242918][ T6762] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9559'. [ 1860.258391][ T6762] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1861.637544][ T6788] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9568'. [ 1861.749904][ T6791] netlink: 'syz.2.9566': attribute type 10 has an invalid length. [ 1862.304062][ T6798] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1862.312592][ T6798] syzkaller1: linktype set to 769 [ 1862.334767][ T6798] netlink: 'syz.2.9571': attribute type 3 has an invalid length. [ 1862.344905][ T6798] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.9571'. [ 1862.903954][T31194] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1863.332263][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1863.341153][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1863.355107][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1863.377489][ T6821] netlink: 'syz.0.9580': attribute type 9 has an invalid length. [ 1863.385521][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1863.409800][ T5826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1863.419834][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1863.444863][ T6821] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.9580'. [ 1863.601975][ T6830] syzkaller0: entered promiscuous mode [ 1863.618459][ T6830] syzkaller0: entered allmulticast mode [ 1863.690597][ T6832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9582'. [ 1864.144464][T10954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.470030][T10954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.554217][ T6844] netlink: 'syz.2.9585': attribute type 10 has an invalid length. [ 1864.589937][ T6844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9585'. [ 1864.662964][ T6844] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1864.709792][ T6844] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1864.776028][ T6844] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1865.536069][T31641] Bluetooth: hci3: command tx timeout [ 1865.546681][T10954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.699608][T10954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.798053][ T6861] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9590'. [ 1865.957785][ T6822] chnl_net:caif_netlink_parms(): no params data found [ 1866.303631][ T6875] netlink: 'syz.1.9593': attribute type 39 has an invalid length. [ 1866.327593][ T6866] netlink: 'syz.0.9591': attribute type 21 has an invalid length. [ 1866.341593][ T6866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9591'. [ 1867.356175][ T6886] syzkaller0: entered promiscuous mode [ 1867.361707][ T6886] syzkaller0: entered allmulticast mode [ 1867.368519][ T6878] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1867.615449][T31641] Bluetooth: hci3: command tx timeout [ 1869.329961][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1869.343583][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.358541][ T6916] netlink: 'syz.2.9598': attribute type 41 has an invalid length. [ 1869.366943][ T6822] bridge_slave_0: entered allmulticast mode [ 1869.374241][ T6822] bridge_slave_0: entered promiscuous mode [ 1869.393986][ T6916] netlink: 'syz.2.9598': attribute type 41 has an invalid length. [ 1869.476053][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1869.483249][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.492061][ T6822] bridge_slave_1: entered allmulticast mode [ 1869.500075][ T6822] bridge_slave_1: entered promiscuous mode [ 1869.643057][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.688396][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1869.697637][T31641] Bluetooth: hci3: command tx timeout [ 1869.896738][ T6822] team0: Port device team_slave_0 added [ 1870.038667][ T6822] team0: Port device team_slave_1 added [ 1870.164965][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.184869][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.225068][ T6822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1870.272295][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1870.283264][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.324975][ T6822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.310783][ T6822] hsr_slave_0: entered promiscuous mode [ 1871.322026][ T6822] hsr_slave_1: entered promiscuous mode [ 1871.331139][ T6822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1871.345144][ T6822] Cannot create hsr debugfs directory [ 1871.519522][ T6951] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9605'. [ 1871.775409][T31641] Bluetooth: hci3: command tx timeout [ 1872.114265][T10954] hsr_slave_0: left promiscuous mode [ 1872.132881][T10954] hsr_slave_1: left promiscuous mode [ 1872.213121][T10954] veth0_macvtap: left promiscuous mode [ 1872.224901][T10954] veth1_vlan: left promiscuous mode [ 1872.255552][T10954] veth0_vlan: left promiscuous mode [ 1875.240053][ T7016] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9613'. [ 1875.689303][ T7033] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 1875.737681][ T7037] netlink: 'syz.1.9617': attribute type 2 has an invalid length. [ 1875.762071][ T7037] netlink: 'syz.1.9617': attribute type 1 has an invalid length. [ 1875.773758][ T7037] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9617'. [ 1876.222411][ T7033] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 1876.266215][ T7037] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 1876.292885][ T7041] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 1876.315634][ T7044] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 1876.377027][ T7051] netlink: 'syz.1.9617': attribute type 29 has an invalid length. [ 1876.602265][ T6822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1876.831315][ T6822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1876.996405][ T6822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1877.244646][ T6822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1877.438776][ T7093] netlink: zone id is out of range [ 1877.444121][ T7093] netlink: set zone limit has 8 unknown bytes [ 1877.483547][ T6822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.534034][ T6822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.566325][T31770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.573543][T31770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.631689][ T7098] ±ÿ: renamed from veth0_vlan (while UP) [ 1877.644568][T31770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.651742][T31770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1877.961970][ T7112] netlink: 'syz.2.9629': attribute type 1 has an invalid length. [ 1877.987037][ T7112] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.9629'. [ 1878.268295][ T6822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1878.295069][ T7124] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.9630'. [ 1878.447435][ T6822] veth0_vlan: entered promiscuous mode [ 1878.491277][ T6822] veth1_vlan: entered promiscuous mode [ 1878.579919][ T6822] veth0_macvtap: entered promiscuous mode [ 1878.630303][ T6822] veth1_macvtap: entered promiscuous mode [ 1878.714409][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.754331][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.793583][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1878.835862][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1878.873041][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1878.939434][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1878.977410][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.014284][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.049726][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.084506][ T6822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1879.117699][ T6822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1879.167574][ T6822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1879.217954][ T6822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.242860][ T6822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.274393][ T6822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.315037][ T6822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1879.663414][T31198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.682765][T31198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.774782][ T6316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.794229][ T6316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1880.057849][ T7168] netlink: 'syz.1.9638': attribute type 1 has an invalid length. [ 1880.100308][ T7168] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.9638'. [ 1880.543175][ T7180] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9573'. [ 1880.605479][ T7180] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1881.427449][ T7170] validate_nla: 1 callbacks suppressed [ 1881.427470][ T7170] netlink: 'syz.0.9637': attribute type 29 has an invalid length. [ 1881.480743][ T7173] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9639'. [ 1881.501350][ T7177] netlink: 'syz.0.9637': attribute type 29 has an invalid length. [ 1881.520955][ T7184] netlink: 'syz.0.9637': attribute type 29 has an invalid length. [ 1881.538654][ T7187] netlink: 'syz.0.9637': attribute type 29 has an invalid length. [ 1881.568535][ T7194] netlink: 'syz.0.9637': attribute type 29 has an invalid length. [ 1882.133525][ T7206] netlink: 'syz.3.9644': attribute type 4 has an invalid length. [ 1882.165471][ T7206] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.9644'. [ 1882.183214][ T7205] netlink: 'syz.3.9644': attribute type 4 has an invalid length. [ 1882.206302][ T7205] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.9644'. [ 1882.291743][ T7209] netlink: 'syz.0.9645': attribute type 21 has an invalid length. [ 1883.314325][ T7229] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9651'. [ 1883.698520][ T7240] netlink: 'syz.1.9654': attribute type 5 has an invalid length. [ 1884.960200][ T7277] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1884.969955][ T7277] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1885.041923][ T7277] netlink: 'syz.1.9664': attribute type 2 has an invalid length. [ 1885.075494][ T7277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1885.179364][ T7277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9664'. [ 1885.523715][ T7293] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.9668'. [ 1885.575100][ T7295] sit0: entered promiscuous mode [ 1886.838274][ T7318] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.9676'. [ 1886.883572][ T7318] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1886.985629][ T7323] validate_nla: 3 callbacks suppressed [ 1886.985645][ T7323] netlink: 'syz.0.9676': attribute type 2 has an invalid length. [ 1887.061923][ T7323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9676'. [ 1887.229970][ T7318] netlink: 'syz.0.9676': attribute type 2 has an invalid length. [ 1887.244798][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9676'. [ 1887.736649][ T7343] netlink: 'syz.2.9681': attribute type 10 has an invalid length. [ 1887.785760][ T7343] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9681'. [ 1891.532819][ T7384] delete_channel: no stack [ 1891.679362][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9698'. [ 1892.761828][ T7413] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.9706'. [ 1893.056191][ T7421] netlink: 'syz.1.9709': attribute type 39 has an invalid length. [ 1894.040343][T31768] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1894.814380][ T7463] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9717'. [ 1895.179034][ T7469] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9719'. [ 1895.211939][ T7469] : renamed from caif0 [ 1895.259662][ T7469] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1895.297959][ T7468] netlink: 'syz.0.9721': attribute type 21 has an invalid length. [ 1895.318422][ T7468] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9721'. [ 1895.632234][ T7480] mac80211_hwsim hwsim140 wlan0: entered promiscuous mode [ 1895.685354][ T7480] mac80211_hwsim hwsim140 wlan0: entered allmulticast mode [ 1896.033831][ T7495] netlink: 'syz.1.9728': attribute type 4 has an invalid length. [ 1896.064149][ T7495] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.9728'. [ 1896.212593][ T7499] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9729'. [ 1896.256909][ T7499] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1896.267141][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1896.680089][ T7508] netlink: 'syz.3.9731': attribute type 6 has an invalid length. [ 1896.720205][ T7508] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9731'. [ 1896.774367][ T7510] Q±6ã`Ò˜: renamed from lo (while UP) [ 1896.787183][ T7513] netlink: 'syz.1.9732': attribute type 1 has an invalid length. [ 1896.804153][ T7513] netlink: 16086 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1896.949925][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9733'. [ 1896.995421][ T7520] : renamed from caif0 [ 1897.024582][ T7520] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1897.082283][ T7522] netlink: 'syz.3.9735': attribute type 1 has an invalid length. [ 1897.105365][ T7522] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.9735'. [ 1897.312153][ T7529] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9737'. [ 1897.945659][ T7538] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.9740'. [ 1898.569774][ T7556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1898.577110][ T7556] IPv6: NLM_F_CREATE should be set when creating new route [ 1898.584422][ T7556] IPv6: NLM_F_CREATE should be set when creating new route [ 1898.591710][ T7556] IPv6: NLM_F_CREATE should be set when creating new route [ 1898.699281][ T7555] syzkaller0: entered promiscuous mode [ 1898.726762][ T7555] syzkaller0: entered allmulticast mode [ 1901.804658][ T7573] netlink: 'syz.0.9753': attribute type 10 has an invalid length. [ 1901.832698][ T7573] team0: Port device dummy0 added [ 1902.035595][ T7591] netlink: 'syz.2.9757': attribute type 9 has an invalid length. [ 1902.053929][ T7591] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9757'. [ 1902.651122][ T7608] netlink: 'syz.2.9761': attribute type 10 has an invalid length. [ 1902.709480][ T7608] bridge0: port 3(hsr0) entered disabled state [ 1902.747719][ T7608] hsr0: left allmulticast mode [ 1902.752631][ T7608] hsr_slave_0: left allmulticast mode [ 1902.783362][ T7608] hsr_slave_1: left allmulticast mode [ 1902.789886][ T7608] bridge0: port 3(hsr0) entered disabled state [ 1902.852451][ T7608] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1902.873599][ T7608] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1902.884590][ T7608] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1902.926429][ T7608] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1903.388196][ T7620] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1904.229530][ T7658] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9775'. [ 1904.726165][ T7675] netlink: 'syz.2.9780': attribute type 21 has an invalid length. [ 1905.351513][T10954] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.401189][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1905.411177][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1905.419751][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1905.444832][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1905.461331][ T5826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1905.471117][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1905.473064][T10954] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.531933][ T7697] netlink: 'syz.3.9787': attribute type 2 has an invalid length. [ 1905.607377][T10954] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.665996][T10954] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1905.839863][ T7694] chnl_net:caif_netlink_parms(): no params data found [ 1905.960646][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1905.972708][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1905.981305][ T7694] bridge_slave_0: entered allmulticast mode [ 1905.993404][ T7694] bridge_slave_0: entered promiscuous mode [ 1906.004337][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.019804][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.029452][ T7694] bridge_slave_1: entered allmulticast mode [ 1906.042032][ T7694] bridge_slave_1: entered promiscuous mode [ 1906.092732][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1906.112303][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1906.173302][ T7694] team0: Port device team_slave_0 added [ 1906.184743][ T7694] team0: Port device team_slave_1 added [ 1906.232526][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1906.241932][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1906.275789][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1906.364854][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1906.387610][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1906.440531][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.551800][ T7694] hsr_slave_0: entered promiscuous mode [ 1906.567908][ T7694] hsr_slave_1: entered promiscuous mode [ 1906.672367][ T7715] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9792'. [ 1906.721258][ T7715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1906.822205][ T7720] netlink: 'syz.0.9790': attribute type 1 has an invalid length. [ 1906.847340][ T7720] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.9790'. [ 1907.101763][ T7719] syzkaller0: entered promiscuous mode [ 1907.126182][ T7719] syzkaller0: entered allmulticast mode [ 1907.535427][ T5826] Bluetooth: hci1: command tx timeout [ 1909.618881][ T5826] Bluetooth: hci1: command tx timeout [ 1909.748652][ T7729] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9793'. [ 1909.982897][ T7759] netlink: 'syz.0.9795': attribute type 29 has an invalid length. [ 1910.123016][ T7759] netlink: 'syz.0.9795': attribute type 29 has an invalid length. [ 1910.161923][ T7768] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.9797'. [ 1910.363400][ T7763] netlink: 'syz.0.9795': attribute type 29 has an invalid length. [ 1910.614599][ T7766] netlink: 'syz.0.9795': attribute type 29 has an invalid length. [ 1910.628634][ T7765] netlink: 'syz.0.9795': attribute type 29 has an invalid length. [ 1911.146810][ T7793] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.9801'. [ 1911.179064][ T7793] openvswitch: netlink: Message has 20476 unknown bytes. [ 1911.232040][ T7792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9802'. [ 1911.447977][ T7694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1911.474573][ T7694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1911.533452][ T7694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1911.561438][ T7694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1911.705644][ T5826] Bluetooth: hci1: command tx timeout [ 1911.722837][ T7800] syzkaller0: entered promiscuous mode [ 1911.752758][ T7800] syzkaller0: entered allmulticast mode [ 1911.996321][ T7694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1912.046978][ T7694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1912.103040][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.110300][ T6324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.121554][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.128789][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.287999][ T7694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1913.580462][ T5826] Bluetooth: hci2: ISO packet for unknown connection handle 2878 [ 1913.623578][ T7694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.775474][ T5826] Bluetooth: hci1: command tx timeout [ 1913.928591][T10954] veth0_to_team: left allmulticast mode [ 1913.949328][T10954] veth0_to_team: left promiscuous mode [ 1913.972202][T10954] Ÿë: port 1(veth0_to_team) entered disabled state [ 1914.099703][T10954] hsr_slave_0: left promiscuous mode [ 1914.107866][T10954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1914.126827][T10954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.135743][T10954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1914.153594][T10954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.174200][T10954] hsr0: left allmulticast mode [ 1914.184235][T10954] bridge0: port 1(hsr0) entered disabled state [ 1914.212756][T10954] bridge_slave_1: left allmulticast mode [ 1914.223002][T10954] bridge_slave_1: left promiscuous mode [ 1914.229413][T10954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.257687][T10954] veth1_macvtap: left promiscuous mode [ 1914.265728][T10954] veth0_macvtap: left promiscuous mode [ 1914.271325][T10954] veth1_vlan: left promiscuous mode [ 1914.282499][ T7871] netlink: 'syz.2.9813': attribute type 9 has an invalid length. [ 1914.291913][T10954] ±ÿ: left promiscuous mode [ 1914.296625][ T7871] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9813'. [ 1914.667248][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.673897][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.728071][T10954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1916.003871][T10954] bond0 (unregistering): Released all slaves [ 1916.117563][ T7869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1916.231374][ T7873] netlink: 'syz.2.9813': attribute type 9 has an invalid length. [ 1916.255890][ T7873] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.9813'. [ 1916.402361][ T7694] veth0_vlan: entered promiscuous mode [ 1916.435571][ T7890] ªªªªªª: renamed from vlan0 (while UP) [ 1916.545072][ T7694] veth1_vlan: entered promiscuous mode [ 1916.703168][ T7694] veth0_macvtap: entered promiscuous mode [ 1916.762494][ T7694] veth1_macvtap: entered promiscuous mode [ 1916.817381][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.847912][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.865059][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.905656][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.925289][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.952322][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.976903][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1917.073293][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1917.104123][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1917.126862][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1917.145273][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1917.155144][ T7694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1917.170344][ T7694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1917.184282][ T7694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1917.237346][ T7694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.264481][ T7694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.281654][ T7694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.290778][ T7694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.523889][T31196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.549668][T31196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.604765][T31196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.623826][T31196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.759552][ T7940] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1917.772102][ T7940] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1919.221569][ T7968] netlink: 'syz.1.9833': attribute type 27 has an invalid length. [ 1920.468231][ T7981] netlink: 'syz.0.9836': attribute type 3 has an invalid length. [ 1920.476407][ T7981] netlink: 185700 bytes leftover after parsing attributes in process `syz.0.9836'. [ 1921.260246][ T7994] syzkaller0: entered promiscuous mode [ 1921.274127][ T7994] syzkaller0: entered allmulticast mode [ 1922.312594][ T7999] netlink: 'syz.2.9842': attribute type 17 has an invalid length. [ 1922.774521][ T8006] netlink: 'syz.1.9844': attribute type 21 has an invalid length. [ 1924.073523][ T8026] netlink: 'syz.1.9850': attribute type 21 has an invalid length. [ 1924.084668][ T8026] netlink: 'syz.1.9850': attribute type 20 has an invalid length. [ 1924.099786][ T8025] netlink: 'syz.1.9850': attribute type 21 has an invalid length. [ 1924.110035][ T8025] netlink: 'syz.1.9850': attribute type 20 has an invalid length. [ 1924.319002][ T8029] syzkaller0: entered promiscuous mode [ 1924.326136][ T8029] syzkaller0: entered allmulticast mode [ 1925.266753][ T6324] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1927.434330][ T8030] mac80211_hwsim hwsim140 wlan0: left promiscuous mode [ 1927.442545][ T8030] mac80211_hwsim hwsim140 wlan0: left allmulticast mode [ 1929.364591][ T8046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1929.616966][ T8057] netlink: 'syz.0.9857': attribute type 10 has an invalid length. [ 1929.675420][ T8057] syz_tun: entered promiscuous mode [ 1929.701914][ T8057] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1929.765488][ T8059] netlink: 'syz.0.9857': attribute type 10 has an invalid length. [ 1930.067077][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1930.095960][ T8059] team0: Port device bond0 added [ 1930.625931][ T8070] netlink: 'syz.3.9861': attribute type 39 has an invalid length. [ 1931.432370][ T8075] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9861'. [ 1931.728550][ T8082] mac80211_hwsim hwsim146 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1931.920193][ T8095] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9869'. [ 1931.939195][ T8095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1933.434523][ T8115] netlink: 'syz.3.9876': attribute type 10 has an invalid length. [ 1933.943438][T31198] wlan1: Trigger new scan to find an IBSS to join [ 1934.577615][ T8150] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9888'. [ 1935.120522][ T8171] netlink: 'syz.1.9894': attribute type 58 has an invalid length. [ 1935.130311][ T8171] netlink: 144 bytes leftover after parsing attributes in process `syz.1.9894'. [ 1935.486893][ T8185] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9900'. [ 1935.542258][ T8189] netlink: 'syz.1.9902': attribute type 9 has an invalid length. [ 1935.558095][ T8189] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1935.686017][ T8191] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9901'. [ 1936.238992][ T8189] netlink: 'syz.1.9902': attribute type 9 has an invalid length. [ 1936.292132][ T8189] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9902'. [ 1936.991216][T31198] wlan1: Trigger new scan to find an IBSS to join [ 1938.034239][ T8222] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9910'. [ 1938.056332][ T8222] netlink: 'syz.2.9910': attribute type 10 has an invalid length. [ 1938.069689][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.112227][ T8222] bridge_slave_1: left allmulticast mode [ 1938.127893][ T8222] bridge_slave_1: left promiscuous mode [ 1938.144010][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.189170][ T8230] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.9914'. [ 1938.200887][ T8222] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1938.241168][ T8231] syzkaller0: tun_chr_ioctl cmd 21731 [ 1938.433203][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1938.451871][ T8234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1938.523404][ T8234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1938.542825][ T8234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1938.778622][ T8247] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9918'. [ 1939.004496][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.025610][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.054812][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.076116][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1939.098278][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.124915][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1939.145294][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.156953][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1939.177040][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.195132][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.210367][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1939.228698][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.245375][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1939.265475][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.279387][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1939.298613][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1939.314995][ T8258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9921'. [ 1939.372459][ T8268] netlink: 'syz.3.9925': attribute type 58 has an invalid length. [ 1939.935704][ T6324] wlan1: Creating new IBSS network, BSSID a6:31:95:b6:b3:9c [ 1939.969305][ T8279] netlink: 'syz.0.9929': attribute type 10 has an invalid length. [ 1943.034691][ T8297] sit0: entered allmulticast mode [ 1943.065455][ T8298] sit0: entered promiscuous mode [ 1943.350099][ T8303] netlink: 'syz.2.9935': attribute type 58 has an invalid length. [ 1943.376573][ T8303] __nla_validate_parse: 27 callbacks suppressed [ 1943.376591][ T8303] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9935'. [ 1944.214770][ T8321] netlink: 142592 bytes leftover after parsing attributes in process `syz.0.9941'. [ 1944.295839][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9941'. [ 1944.397353][ T8321] syzkaller0: entered promiscuous mode [ 1944.424948][ T8321] syzkaller0: entered allmulticast mode [ 1944.640450][ T8327] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1944.659188][ T8327] syzkaller1: Linktype set failed because interface is up [ 1944.667421][ T7445] syzkaller1: tun_net_xmit 90 [ 1944.801857][T10950] syzkaller1: tun_net_xmit 86 [ 1945.261640][ T7445] syzkaller1: tun_net_xmit 90 [ 1948.301366][ T8353] syzkaller0: entered promiscuous mode [ 1948.308874][ T8353] syzkaller0: entered allmulticast mode [ 1950.382900][ T8359] netlink: 'syz.2.9947': attribute type 16 has an invalid length. [ 1950.391439][ T8359] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9947'. [ 1950.654265][ T8379] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.9952'. [ 1950.684357][ T8379] net_ratelimit: 23 callbacks suppressed [ 1950.684445][ T8379] netlink: zone id is out of range [ 1950.735407][ T8379] netlink: zone id is out of range [ 1950.747120][ T8379] netlink: zone id is out of range [ 1950.759952][ T8379] netlink: zone id is out of range [ 1950.797011][ T8379] netlink: zone id is out of range [ 1950.799243][ T8387] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.9952'. [ 1950.821534][ T8379] netlink: zone id is out of range [ 1950.841676][ T8387] openvswitch: netlink: Key type 8208 is out of range max 32 [ 1950.855320][ T8379] netlink: zone id is out of range [ 1950.860998][ T8379] netlink: zone id is out of range [ 1950.890710][ T8379] netlink: zone id is out of range [ 1951.059210][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1951.130363][ T8404] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1951.205564][ T8403] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9959'. [ 1952.124456][ T8434] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9968'. [ 1952.165317][ T8438] netlink: 'syz.3.9969': attribute type 1 has an invalid length. [ 1952.292707][ T8445] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9971'. [ 1952.306841][ T8447] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.9972'. [ 1952.993559][ T8442] netlink: 'syz.1.9971': attribute type 3 has an invalid length. [ 1953.025330][ T8442] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9971'. [ 1953.600111][ T8472] syzkaller0: entered promiscuous mode [ 1953.605782][ T8472] syzkaller0: entered allmulticast mode [ 1953.736769][ T8492] netlink: 'syz.3.9981': attribute type 21 has an invalid length. [ 1953.778877][ T8492] netlink: 'syz.3.9981': attribute type 19 has an invalid length. [ 1956.981143][ T8502] netlink: 'syz.0.9982': attribute type 23 has an invalid length. [ 1956.989583][ T8532] netlink: 'syz.3.9988': attribute type 10 has an invalid length. [ 1957.112082][ T6316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1957.979139][ T8566] netlink: 'syz.3.9995': attribute type 21 has an invalid length. [ 1957.994224][ T8566] __nla_validate_parse: 3 callbacks suppressed [ 1957.994240][ T8566] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9995'. [ 1958.127492][ T8565] netlink: 'syz.3.9995': attribute type 21 has an invalid length. [ 1958.135934][ T8565] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9995'. [ 1959.307242][ T8605] netlink: 'syz.1.10004': attribute type 6 has an invalid length. [ 1959.326451][ T8605] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10004'. [ 1959.566341][ T8616] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10007'. [ 1959.590175][ T8616] netlink: 'syz.2.10007': attribute type 22 has an invalid length. [ 1959.605752][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10007'. [ 1961.739501][ T8661] netlink: 'syz.0.10020': attribute type 9 has an invalid length. [ 1961.766818][ T8661] netlink: 399 bytes leftover after parsing attributes in process `syz.0.10020'. [ 1961.974931][ T8665] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10021'. [ 1962.158996][ T8671] netlink: 'syz.2.10024': attribute type 2 has an invalid length. [ 1962.175932][ T8671] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10024'. [ 1963.028812][ T8682] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10027'. [ 1963.048559][ T8682] net_ratelimit: 8 callbacks suppressed [ 1963.048602][ T8682] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1963.093783][ T8685] netlink: 148 bytes leftover after parsing attributes in process `syz.1.10026'. [ 1963.097154][ T8682] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.10027'. [ 1963.164854][ T8689] netlink: 'syz.2.10028': attribute type 29 has an invalid length. [ 1963.185532][ T8689] netlink: 'syz.2.10028': attribute type 29 has an invalid length. [ 1963.223065][ T8689] netlink: 'syz.2.10028': attribute type 29 has an invalid length. [ 1963.252460][ T8692] netlink: 'syz.0.10030': attribute type 3 has an invalid length. [ 1963.264785][ T8692] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.10030'. [ 1963.542411][ T8697] netlink: 'syz.0.10032': attribute type 16 has an invalid length. [ 1963.553010][ T8697] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10032'. [ 1964.393491][ T8712] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10036'. [ 1965.854998][ T8741] netlink: 148 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1966.104408][ T8745] netlink: 'syz.1.10048': attribute type 10 has an invalid length. [ 1966.149333][ T8745] team0: Port device geneve1 added [ 1966.157878][ T8749] mac80211_hwsim hwsim133 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1966.182287][ T8749] netlink: 14546 bytes leftover after parsing attributes in process `syz.0.10047'. [ 1966.261025][ T8752] netlink: 'syz.1.10049': attribute type 10 has an invalid length. [ 1966.269493][ T8752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10049'. [ 1966.288881][ T8752] batman_adv: batadv0: Adding interface: vlan1 [ 1966.296018][ T8752] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1966.323012][ T8752] batman_adv: batadv0: Interface activated: vlan1 [ 1966.339650][ T8754] netlink: 'syz.2.10050': attribute type 1 has an invalid length. [ 1966.365281][ T8754] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.10050'. [ 1966.420032][ T8759] netlink: 'syz.2.10050': attribute type 1 has an invalid length. [ 1968.062507][ T8805] netlink: 'syz.2.10066': attribute type 29 has an invalid length. [ 1968.083411][ T8805] netlink: 'syz.2.10066': attribute type 29 has an invalid length. [ 1968.204833][ T8804] bridge_slave_1: left allmulticast mode [ 1968.235420][ T8804] bridge_slave_1: left promiscuous mode [ 1968.265060][ T8804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.938476][ T8804] bridge_slave_0: left allmulticast mode [ 1968.973349][ T8804] bridge_slave_0: left promiscuous mode [ 1968.979758][T31194] wlan1: Trigger new scan to find an IBSS to join [ 1969.010371][ T8804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.032306][ T8812] netlink: 'syz.1.10067': attribute type 29 has an invalid length. [ 1969.195495][ T8809] netlink: 'syz.3.10064': attribute type 10 has an invalid length. [ 1969.208114][ T8809] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.256557][ T8809] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.266113][ T8809] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.276098][ T8809] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.321763][ T8809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.342164][ T8809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.351182][ T8809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.360193][ T8809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1969.379410][ T8809] team0: Port device geneve1 added [ 1969.404163][ T8812] netlink: 'syz.1.10067': attribute type 29 has an invalid length. [ 1969.568119][ T8816] syzkaller0: entered promiscuous mode [ 1969.586543][ T8816] syzkaller0: entered allmulticast mode [ 1969.827884][ T5826] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 1973.935541][T31200] wlan1: Trigger new scan to find an IBSS to join [ 1974.839437][ T5897] wlan1: Creating new IBSS network, BSSID da:28:da:a8:a5:19 [ 1976.101362][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.108182][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.130083][ T8864] netlink: 'syz.3.10081': attribute type 21 has an invalid length. [ 1976.139705][ T8864] __nla_validate_parse: 3 callbacks suppressed [ 1976.139719][ T8864] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10081'. [ 1976.310153][ T8874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10086'. [ 1976.322920][ T8874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10086'. [ 1976.334199][ T8874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10086'. [ 1976.369025][ T8877] netlink: 'syz.1.10087': attribute type 46 has an invalid length. [ 1976.390980][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10087'. [ 1976.593646][ T8879] sock: sock_timestamping_bind_phc: sock not bind to device [ 1976.626517][ T8879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10088'. [ 1977.224678][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.302290][ T8879] bridge_slave_0 (unregistering): left allmulticast mode [ 1977.309655][ T8879] bridge_slave_0 (unregistering): left promiscuous mode [ 1977.317074][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.349852][ T8885] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10090'. [ 1977.507119][ T8897] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10093'. [ 1979.417903][ T8916] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1979.447554][ T8916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1979.477202][ T8918] tap0: tun_chr_ioctl cmd 1074025676 [ 1979.482543][ T8918] tap0: owner set to 776 [ 1979.654402][ T8927] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10101'. [ 1980.903033][ T8952] netlink: 'syz.1.10109': attribute type 2 has an invalid length. [ 1980.922817][ T8952] netlink: 'syz.1.10109': attribute type 8 has an invalid length. [ 1980.937431][ T8955] netlink: 'syz.1.10109': attribute type 6 has an invalid length. [ 1981.017884][ T8960] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1981.444065][ T8970] syzkaller0: entered promiscuous mode [ 1981.451242][ T8970] syzkaller0: entered allmulticast mode [ 1985.472049][ T9034] __nla_validate_parse: 5 callbacks suppressed [ 1985.472086][ T9034] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.10131'. [ 1985.555671][ T9028] cgroup: fork rejected by pids controller in /syz3 [ 1985.619277][ T9034] netlink: 'syz.2.10131': attribute type 1 has an invalid length. [ 1985.666095][ T9034] netlink: 'syz.2.10131': attribute type 2 has an invalid length. [ 1985.707815][ T9034] netlink: 'syz.2.10131': attribute type 3 has an invalid length. [ 1985.754366][ T9034] netlink: 'syz.2.10131': attribute type 4 has an invalid length. [ 1985.924449][ T9046] netlink: 'syz.2.10133': attribute type 153 has an invalid length. [ 1985.944062][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1985.987281][ T9046] netlink: 'syz.2.10133': attribute type 153 has an invalid length. [ 1986.007354][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1986.032338][ T9046] netlink: 'syz.2.10133': attribute type 153 has an invalid length. [ 1986.045503][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1986.058244][ T9046] netlink: 'syz.2.10133': attribute type 153 has an invalid length. [ 1986.066474][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1986.079237][ T9046] netlink: 'syz.2.10133': attribute type 153 has an invalid length. [ 1986.088093][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1986.100843][ T9046] netlink: 'syz.2.10133': attribute type 153 has an invalid length. [ 1986.109326][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1986.121926][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1986.134500][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1986.147622][ T9046] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10133'. [ 1988.420161][ T9051] Bluetooth: hci3: command 0x0406 tx timeout [ 1989.213156][ T3832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.391912][ T3832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.543802][ T3832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.725974][ T3832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.199565][ T9051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1990.219019][ T9051] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1990.228645][ T9051] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1990.254697][ T9051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1990.266444][ T9051] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1990.278173][ T9051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1990.562863][ T9100] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1990.579749][ T9100] CPU: 1 PID: 9100 Comm: syz.0.10148 Not tainted syzkaller #0 [ 1990.587258][ T9100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1990.597335][ T9100] Call Trace: [ 1990.600637][ T9100] [ 1990.603584][ T9100] dump_stack_lvl+0x18c/0x250 [ 1990.608306][ T9100] ? show_regs_print_info+0x20/0x20 [ 1990.613531][ T9100] ? load_image+0x420/0x420 [ 1990.618072][ T9100] sysfs_warn_dup+0x8e/0xa0 [ 1990.622600][ T9100] sysfs_do_create_link_sd+0xc0/0x110 [ 1990.628001][ T9100] device_add_class_symlinks+0x1cf/0x240 [ 1990.633665][ T9100] device_add+0x4f9/0xc40 [ 1990.638024][ T9100] wiphy_register+0x1d99/0x2ac0 [ 1990.642920][ T9100] ? cfg80211_event_work+0x40/0x40 [ 1990.648053][ T9100] ? minstrel_ht_alloc+0x88a/0x990 [ 1990.653195][ T9100] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1990.659293][ T9100] ieee80211_register_hw+0x2dd8/0x3b30 [ 1990.664791][ T9100] ? ieee80211_register_hw+0xf11/0x3b30 [ 1990.670368][ T9100] ? ieee80211_tasklet_handler+0x20/0x20 [ 1990.676021][ T9100] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1990.681942][ T9100] ? __debug_object_init+0xec/0x450 [ 1990.687171][ T9100] ? __asan_memset+0x22/0x40 [ 1990.691789][ T9100] ? __hrtimer_init+0x189/0x270 [ 1990.696674][ T9100] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1990.702438][ T9100] ? mac80211_hwsim_free+0x220/0x220 [ 1990.707745][ T9100] ? rcu_is_watching+0x15/0xb0 [ 1990.712537][ T9100] ? kstrndup+0xbd/0x140 [ 1990.716816][ T9100] hwsim_new_radio_nl+0xdad/0x1a70 [ 1990.721958][ T9100] ? __nla_validate+0x50/0x50 [ 1990.726676][ T9100] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1990.733040][ T9100] ? __nla_parse+0x40/0x50 [ 1990.737491][ T9100] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1990.743854][ T9100] genl_family_rcv_msg_doit+0x21a/0x310 [ 1990.749431][ T9100] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1990.755354][ T9100] ? bpf_lsm_capable+0x9/0x10 [ 1990.760057][ T9100] ? security_capable+0x89/0xb0 [ 1990.764941][ T9100] genl_rcv_msg+0x611/0x7a0 [ 1990.769471][ T9100] ? genl_bind+0x360/0x360 [ 1990.773908][ T9100] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1990.780259][ T9100] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1990.786868][ T9100] ? ref_tracker_free+0x686/0x830 [ 1990.791926][ T9100] netlink_rcv_skb+0x235/0x4c0 [ 1990.796715][ T9100] ? genl_bind+0x360/0x360 [ 1990.801155][ T9100] ? netlink_ack+0x1160/0x1160 [ 1990.805969][ T9100] ? __lock_acquire+0x7d80/0x7d80 [ 1990.811031][ T9100] ? down_read+0x1ac/0x2e0 [ 1990.815474][ T9100] genl_rcv+0x28/0x40 [ 1990.819480][ T9100] netlink_unicast+0x7b1/0x930 [ 1990.824279][ T9100] netlink_sendmsg+0x8d0/0xbf0 [ 1990.829076][ T9100] ? netlink_getsockopt+0x590/0x590 [ 1990.834299][ T9100] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1990.839862][ T9100] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1990.845161][ T9100] ? security_socket_sendmsg+0x80/0xa0 [ 1990.850629][ T9100] ? netlink_getsockopt+0x590/0x590 [ 1990.855834][ T9100] ____sys_sendmsg+0x61b/0x980 [ 1990.860617][ T9100] ? __asan_memset+0x22/0x40 [ 1990.865212][ T9100] ? __sys_sendmsg_sock+0x30/0x30 [ 1990.870231][ T9100] ? __import_iovec+0x5f2/0x850 [ 1990.875089][ T9100] ? import_iovec+0x73/0xa0 [ 1990.879600][ T9100] ___sys_sendmsg+0x2a6/0x360 [ 1990.884282][ T9100] ? __sys_sendmsg+0x2b0/0x2b0 [ 1990.889091][ T9100] __se_sys_sendmsg+0x1d0/0x2c0 [ 1990.893951][ T9100] ? __x64_sys_sendmsg+0x80/0x80 [ 1990.898905][ T9100] ? lockdep_hardirqs_on+0x98/0x150 [ 1990.904111][ T9100] do_syscall_64+0x55/0xb0 [ 1990.908526][ T9100] ? clear_bhb_loop+0x40/0x90 [ 1990.913204][ T9100] ? clear_bhb_loop+0x40/0x90 [ 1990.917882][ T9100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1990.923775][ T9100] RIP: 0033:0x7f2aa179e159 [ 1990.928189][ T9100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1990.947792][ T9100] RSP: 002b:00007f2aa25f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1990.956205][ T9100] RAX: ffffffffffffffda RBX: 00007f2aa1a25fa0 RCX: 00007f2aa179e159 [ 1990.964175][ T9100] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1990.972142][ T9100] RBP: 00007f2aa1835024 R08: 0000000000000000 R09: 0000000000000000 [ 1990.980115][ T9100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1990.988081][ T9100] R13: 00007f2aa1a26038 R14: 00007f2aa1a25fa0 R15: 00007ffd5892c828 [ 1990.996062][ T9100] [ 1991.087994][ T9115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1991.095538][ T9115] IPv6: NLM_F_CREATE should be set when creating new route [ 1991.103173][ T9115] IPv6: NLM_F_CREATE should be set when creating new route [ 1991.110683][ T9115] IPv6: NLM_F_CREATE should be set when creating new route [ 1991.671292][ T9143] validate_nla: 35 callbacks suppressed [ 1991.671311][ T9143] netlink: 'syz.0.10156': attribute type 8 has an invalid length. [ 1991.751101][ T9143] __nla_validate_parse: 29 callbacks suppressed [ 1991.751117][ T9143] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.10156'. [ 1991.965260][ T9095] chnl_net:caif_netlink_parms(): no params data found [ 1992.164892][ T9164] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10158'. [ 1992.307712][ T9158] netlink: 'syz.1.10157': attribute type 21 has an invalid length. [ 1992.339151][ T5826] Bluetooth: hci3: command tx timeout [ 1992.398958][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.411042][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.438723][ T9095] bridge_slave_0: entered allmulticast mode [ 1992.453458][ T9095] bridge_slave_0: entered promiscuous mode [ 1992.494555][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.494838][ T9170] netlink: 'syz.1.10157': attribute type 9 has an invalid length. [ 1992.522706][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.526851][ T9170] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10157'. [ 1992.537784][ T9095] bridge_slave_1: entered allmulticast mode [ 1992.559306][ T9095] bridge_slave_1: entered promiscuous mode [ 1992.714467][ T9164] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10158'. [ 1992.716950][ T9095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1992.779408][ T3832] hsr_slave_0: left promiscuous mode [ 1992.796089][ T3832] hsr_slave_1: left promiscuous mode [ 1992.811416][ T3832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1992.819117][ T3832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1992.830913][ T3832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1992.838496][ T3832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1992.879023][ T3832] veth1_macvtap: left promiscuous mode [ 1992.884619][ T3832] veth0_macvtap: left promiscuous mode [ 1992.890894][ T3832] veth1_vlan: left promiscuous mode [ 1992.896807][ T3832] veth0_vlan: left promiscuous mode [ 1993.051357][ T3832] team0 (unregistering): Port device geneve1 removed [ 1993.514167][ T3832] team0 (unregistering): Port device team_slave_1 removed [ 1993.575115][ T3832] team0 (unregistering): Port device team_slave_0 removed [ 1993.622797][ T3832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1993.669514][ T3832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1994.013451][ T3832] bond0 (unregistering): Released all slaves [ 1994.057406][ T9095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.160321][ T9095] team0: Port device team_slave_0 added [ 1994.193560][ T9095] team0: Port device team_slave_1 added [ 1994.262747][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1994.309401][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1994.346230][ T9095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1994.364452][ T9095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1994.372614][ T9095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1994.400327][ T9095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1994.415262][ T5826] Bluetooth: hci3: command tx timeout [ 1994.552688][ T9095] hsr_slave_0: entered promiscuous mode [ 1994.569887][ T9095] hsr_slave_1: entered promiscuous mode [ 1994.604378][ T9095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1994.647071][ T9095] Cannot create hsr debugfs directory [ 1995.793787][ T9249] netlink: 'syz.1.10173': attribute type 3 has an invalid length. [ 1995.812773][ T9249] netlink: 'syz.1.10173': attribute type 4 has an invalid length. [ 1995.827726][ T9249] netlink: 'syz.1.10173': attribute type 7 has an invalid length. [ 1995.851723][ T9249] netlink: 'syz.1.10173': attribute type 8 has an invalid length. [ 1995.871733][ T9249] netlink: 'syz.1.10173': attribute type 7 has an invalid length. [ 1995.909495][ T9249] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.10173'. [ 1995.929717][ T9095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1995.990887][ T9095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1996.018048][ T9095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1996.063565][ T9095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1996.130707][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10174'. [ 1996.268143][ T9260] syzkaller0: entered promiscuous mode [ 1996.273803][ T9260] syzkaller0: entered allmulticast mode [ 1996.501027][ T5826] Bluetooth: hci3: command tx timeout [ 1997.216107][ T6884] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1998.485802][ T9293] netlink: 'syz.2.10180': attribute type 10 has an invalid length. [ 1998.500950][ T9293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1998.577019][ T5826] Bluetooth: hci3: command tx timeout [ 1998.669200][ T9095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1998.753170][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 1998.784334][T31200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1998.791554][T31200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1998.832808][T31200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1998.840087][T31200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1998.934154][ T9095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1999.190634][ T9318] netlink: 'syz.1.10184': attribute type 21 has an invalid length. [ 1999.216920][ T9318] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10184'. [ 1999.351623][ T9321] syzkaller0: entered promiscuous mode [ 1999.374224][ T9321] syzkaller0: entered allmulticast mode [ 1999.607856][ T9095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1999.711520][ T9095] veth0_vlan: entered promiscuous mode [ 1999.753140][ T9095] veth1_vlan: entered promiscuous mode [ 1999.923764][ T9095] veth0_macvtap: entered promiscuous mode [ 1999.948156][ T9095] veth1_macvtap: entered promiscuous mode [ 1999.990719][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.006810][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.036723][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.071689][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.089164][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.110163][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.133012][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.166521][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.178578][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2000.205332][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2000.230502][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2000.252938][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2000.268615][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2000.278160][ T9339] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.10188'. [ 2000.300503][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2000.325360][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2000.341717][ T9095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2000.352670][ T9095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2000.369886][ T9095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2000.395088][ T9095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.409430][ T9095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.421715][ T9095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.436319][ T9095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2000.679006][T31200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.702276][T31200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2000.808275][ T9367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2000.835225][ T9367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.996914][ T9419] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 2002.010498][ T9416] nla_validate_range_unsigned: 25 callbacks suppressed [ 2002.010515][ T9416] netlink: 'syz.1.10201': attribute type 11 has an invalid length. [ 2002.236886][ T9421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.269123][ T9421] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 2002.306737][ T9421] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2002.344432][ T9421] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2002.376949][ T9421] bond0 (unregistering): Released all slaves [ 2002.425018][ T9430] netlink: 'syz.3.10204': attribute type 10 has an invalid length. [ 2002.918732][ T9443] netlink: 'syz.0.10208': attribute type 16 has an invalid length. [ 2002.933774][ T9443] netlink: 'syz.0.10208': attribute type 25 has an invalid length. [ 2004.275822][ T9455] netlink: 'syz.1.10212': attribute type 29 has an invalid length. [ 2004.284147][ T9455] netlink: 'syz.1.10212': attribute type 29 has an invalid length. [ 2004.769150][ T9468] netlink: 'syz.1.10218': attribute type 1 has an invalid length. [ 2004.815627][ T9468] __nla_validate_parse: 32 callbacks suppressed [ 2004.815759][ T9468] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.10218'. [ 2005.477494][ T9482] syzkaller0: entered promiscuous mode [ 2005.493894][ T9482] syzkaller0: entered allmulticast mode [ 2005.966185][ T9503] netlink: 'syz.2.10226': attribute type 3 has an invalid length. [ 2005.974057][ T9503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10226'. [ 2006.079699][ T9505] netlink: 'syz.2.10226': attribute type 3 has an invalid length. [ 2006.092303][ T9505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10226'. [ 2006.975629][ T6884] wlan1: Trigger new scan to find an IBSS to join [ 2007.668360][ T9503] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.10226'. [ 2007.678313][ T9510] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.10226'. [ 2007.918303][ T9523] netlink: 'syz.3.10231': attribute type 1 has an invalid length. [ 2008.053464][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 2008.070931][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 2008.082013][ T9530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 2008.604418][ T9532] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10233'. [ 2008.620796][ T9537] netlink: 'syz.3.10231': attribute type 13 has an invalid length. [ 2008.633557][ T9537] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10231'. [ 2009.951963][T10951] wlan1: Trigger new scan to find an IBSS to join [ 2010.834201][ T9537] erspan0: refused to change device tx_queue_len [ 2010.931698][ T9545] netlink: 'syz.0.10236': attribute type 3 has an invalid length. [ 2011.147877][ T9543] netlink: 'syz.1.10235': attribute type 10 has an invalid length. [ 2011.204868][ T9552] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.10238'. [ 2011.269854][ T9543] team0: Device vxcan1 is of different type [ 2011.936887][ T9367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2012.346837][ T9570] netlink: 'syz.3.10243': attribute type 21 has an invalid length. [ 2012.440771][ T9573] netlink: 'syz.3.10243': attribute type 3 has an invalid length. [ 2012.465071][ T9576] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.10241'. [ 2012.479464][ T9573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10243'. [ 2012.499462][ T9576] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.10241'. [ 2013.170316][T10951] wlan1: Trigger new scan to find an IBSS to join [ 2014.172106][ T9367] wlan1: Creating new IBSS network, BSSID de:07:d9:9b:84:96 [ 2015.332506][ T9605] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10252'. [ 2015.361144][ T9605] netlink: 'syz.0.10252': attribute type 6 has an invalid length. [ 2015.417127][ T9611] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2015.428527][ T9611] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2015.566044][ T9616] netlink: 'syz.3.10256': attribute type 21 has an invalid length. [ 2015.574030][ T9616] netlink: 'syz.3.10256': attribute type 1 has an invalid length. [ 2015.616051][ T9616] netlink: 100 bytes leftover after parsing attributes in process `syz.3.10256'. [ 2015.916225][ T9622] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.10258'. [ 2015.926678][ T9622] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10258'. [ 2016.734384][ T9638] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.10262'. [ 2017.077424][ T9643] syzkaller0: entered promiscuous mode [ 2017.083007][ T9643] syzkaller0: entered allmulticast mode [ 2019.729036][ T9665] delete_channel: no stack [ 2019.771853][ T9658] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 2020.049519][ T9671] netlink: set zone limit has 8 unknown bytes [ 2020.161044][ T9681] wlan0: mtu greater than device maximum [ 2020.171113][ T9668] netlink: 'syz.2.10272': attribute type 10 has an invalid length. [ 2020.313764][ T9680] netlink: 'syz.0.10275': attribute type 39 has an invalid length. [ 2020.631946][ T9691] netlink: 'syz.0.10280': attribute type 3 has an invalid length. [ 2020.644707][ T9696] syzkaller0: entered promiscuous mode [ 2020.665248][ T9696] syzkaller0: entered allmulticast mode [ 2020.858984][ T9689] netlink: set zone limit has 8 unknown bytes [ 2020.908527][ T9701] netlink: 'syz.1.10282': attribute type 9 has an invalid length. [ 2020.919999][ T9701] netlink: 'syz.1.10282': attribute type 23 has an invalid length. [ 2020.931189][ T9701] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.10282'. [ 2021.334557][ T9696] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10279'. [ 2021.363921][ T9696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2021.450772][ T9707] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.10283'. [ 2021.471337][ T9707] netlink: zone id is out of range [ 2021.484785][ T9707] netlink: zone id is out of range [ 2021.490739][ T9707] netlink: zone id is out of range [ 2021.496657][ T9707] netlink: zone id is out of range [ 2021.502318][ T9707] netlink: zone id is out of range [ 2021.512219][ T9707] netlink: zone id is out of range [ 2021.767207][ T9716] syzkaller0: entered promiscuous mode [ 2021.772745][ T9716] syzkaller0: entered allmulticast mode [ 2021.949124][ T9725] delete_channel: no stack [ 2022.151940][ T9735] netlink: 'syz.2.10292': attribute type 1 has an invalid length. [ 2022.163723][ T9735] netlink: 'syz.2.10292': attribute type 3 has an invalid length. [ 2022.172394][ T9735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10292'. [ 2023.017472][ T9738] netlink: 'syz.3.10293': attribute type 1 has an invalid length. [ 2023.031488][ T9738] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.10293'. [ 2028.037225][ T9753] syzkaller0: entered promiscuous mode [ 2028.042740][ T9753] syzkaller0: entered allmulticast mode [ 2028.272104][ T9780] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.10300'. [ 2028.318033][ T9780] net_ratelimit: 312 callbacks suppressed [ 2028.318069][ T9780] openvswitch: netlink: IP tunnel dst address not specified [ 2029.052643][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.076608][ T9784] bridge0: entered allmulticast mode [ 2029.117550][ T9789] bridge_slave_0: left allmulticast mode [ 2029.125706][ T9789] bridge_slave_0: left promiscuous mode [ 2029.131477][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.281277][ T9796] netlink: 'syz.3.10307': attribute type 10 has an invalid length. [ 2029.305464][ T9796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10307'. [ 2029.321447][ T9796] bridge0: port 3(team0) entered blocking state [ 2029.348278][ T9796] bridge0: port 3(team0) entered disabled state [ 2029.356791][ T9796] team0: entered allmulticast mode [ 2029.362227][ T9796] team_slave_0: entered allmulticast mode [ 2029.368538][ T9796] team_slave_1: entered allmulticast mode [ 2029.375540][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 2029.393651][ T9796] team0: entered promiscuous mode [ 2029.399153][ T9796] team_slave_0: entered promiscuous mode [ 2029.406274][ T9796] team_slave_1: entered promiscuous mode [ 2029.419165][ T9796] bridge0: port 3(team0) entered blocking state [ 2029.426012][ T9796] bridge0: port 3(team0) entered forwarding state [ 2029.517084][ T9806] syzkaller0: entered promiscuous mode [ 2029.521986][ T9804] netlink: 'syz.2.10310': attribute type 29 has an invalid length. [ 2029.522593][ T9806] syzkaller0: entered allmulticast mode [ 2029.548914][ T9804] netlink: 'syz.2.10310': attribute type 29 has an invalid length. [ 2029.559984][ T9807] netlink: 'syz.2.10310': attribute type 29 has an invalid length. [ 2029.655696][ T9812] netlink: 'syz.3.10313': attribute type 10 has an invalid length. [ 2029.710822][ T9806] netlink: set zone limit has 8 unknown bytes [ 2029.757288][ T9806] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10311'. [ 2029.806757][ T9806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2030.778882][ T9818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10316'. [ 2030.914395][ T9827] netlink: 'syz.3.10318': attribute type 1 has an invalid length. [ 2030.931433][ T9827] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.10318'. [ 2031.713503][ T9845] netlink: 'syz.2.10322': attribute type 10 has an invalid length. [ 2031.752631][ T9845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10322'. [ 2034.127854][ T9876] netlink: 10 bytes leftover after parsing attributes in process `syz.2.10332'. [ 2034.264872][ T9880] netlink: 160 bytes leftover after parsing attributes in process `syz.0.10334'. [ 2034.490522][ T9884] netlink: 'syz.1.10335': attribute type 10 has an invalid length. [ 2034.499078][ T9884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10335'. [ 2034.525867][ T9884] bridge0: port 3(team0) entered blocking state [ 2034.533147][ T9884] bridge0: port 3(team0) entered disabled state [ 2034.541363][ T9884] team0: entered allmulticast mode [ 2034.547227][ T9884] team_slave_0: entered allmulticast mode [ 2034.565698][ T9884] team_slave_1: entered allmulticast mode [ 2034.571557][ T9884] geneve1: entered allmulticast mode [ 2034.597943][ T9884] team0: entered promiscuous mode [ 2034.603169][ T9884] team_slave_0: entered promiscuous mode [ 2034.616341][ T9884] team_slave_1: entered promiscuous mode [ 2034.628077][ T9884] geneve1: entered promiscuous mode [ 2034.641621][ T9884] bridge0: port 3(team0) entered blocking state [ 2034.648516][ T9884] bridge0: port 3(team0) entered forwarding state [ 2034.670666][ T9890] netlink: 'syz.0.10339': attribute type 10 has an invalid length. [ 2034.680956][ T9890] macvlan0: entered promiscuous mode [ 2034.721257][ T9890] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2036.151824][ T9924] netlink: 'syz.2.10352': attribute type 21 has an invalid length. [ 2036.173090][ T9924] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10352'. [ 2036.186102][ T9923] netlink: 'syz.3.10351': attribute type 10 has an invalid length. [ 2036.202136][ T9923] macvlan0: entered promiscuous mode [ 2036.217079][ T9926] netlink: 'syz.0.10353': attribute type 29 has an invalid length. [ 2036.298989][ T9923] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2036.309757][ T9926] netlink: 'syz.0.10353': attribute type 29 has an invalid length. [ 2037.447845][ T9948] netlink: 'syz.1.10359': attribute type 2 has an invalid length. [ 2037.459568][ T9948] netlink: 'syz.1.10359': attribute type 8 has an invalid length. [ 2037.467672][ T9948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10359'. [ 2037.542389][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.548883][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.754295][ T9051] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2037.762861][ T9958] netlink: 'syz.1.10362': attribute type 10 has an invalid length. [ 2037.778258][ T9958] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10362'. [ 2037.788158][ T9959] netlink: 'syz.1.10362': attribute type 10 has an invalid length. [ 2037.796610][ T9959] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10362'. [ 2039.031389][ T9974] macvlan0: entered promiscuous mode [ 2039.211340][ T9974] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 2039.747106][ T9989] validate_nla: 1 callbacks suppressed [ 2039.747126][ T9989] netlink: 'syz.2.10371': attribute type 3 has an invalid length. [ 2039.772552][ T9989] netlink: 'syz.2.10371': attribute type 5 has an invalid length. [ 2040.238939][T10006] netlink: 199364 bytes leftover after parsing attributes in process `syz.2.10375'. [ 2040.282846][T10006] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2040.311962][T10006] CPU: 0 PID: 10006 Comm: syz.2.10375 Not tainted syzkaller #0 [ 2040.319574][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2040.329647][T10006] Call Trace: [ 2040.332940][T10006] [ 2040.335881][T10006] dump_stack_lvl+0x18c/0x250 [ 2040.340576][T10006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2040.346757][T10006] ? show_regs_print_info+0x20/0x20 [ 2040.351973][T10006] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2040.358166][T10006] ? dump_stack+0x9/0x20 [ 2040.362434][T10006] sysfs_warn_dup+0x8e/0xa0 [ 2040.366960][T10006] sysfs_do_create_link_sd+0xc0/0x110 [ 2040.372363][T10006] device_add_class_symlinks+0x1cf/0x240 [ 2040.378022][T10006] device_add+0x4f9/0xc40 [ 2040.382373][T10006] wiphy_register+0x1d99/0x2ac0 [ 2040.387274][T10006] ? cfg80211_event_work+0x40/0x40 [ 2040.392401][T10006] ? minstrel_ht_alloc+0x88a/0x990 [ 2040.397540][T10006] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2040.403633][T10006] ieee80211_register_hw+0x2dd8/0x3b30 [ 2040.409128][T10006] ? ieee80211_register_hw+0xf11/0x3b30 [ 2040.414702][T10006] ? ieee80211_tasklet_handler+0x20/0x20 [ 2040.420358][T10006] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2040.426288][T10006] ? __debug_object_init+0xec/0x450 [ 2040.431512][T10006] ? __asan_memset+0x22/0x40 [ 2040.436127][T10006] ? __hrtimer_init+0x189/0x270 [ 2040.441000][T10006] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2040.446765][T10006] ? mac80211_hwsim_free+0x220/0x220 [ 2040.452066][T10006] ? rcu_is_watching+0x15/0xb0 [ 2040.456849][T10006] ? kstrndup+0xbd/0x140 [ 2040.461118][T10006] hwsim_new_radio_nl+0xdad/0x1a70 [ 2040.466260][T10006] ? __nla_validate+0x50/0x50 [ 2040.470993][T10006] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2040.477367][T10006] ? __nla_parse+0x40/0x50 [ 2040.481823][T10006] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2040.488179][T10006] genl_family_rcv_msg_doit+0x21a/0x310 [ 2040.493753][T10006] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2040.499661][T10006] ? lockdep_hardirqs_on+0x98/0x150 [ 2040.504889][T10006] ? genl_rcv_msg+0x5ef/0x7a0 [ 2040.509587][T10006] genl_rcv_msg+0x611/0x7a0 [ 2040.514115][T10006] ? genl_bind+0x360/0x360 [ 2040.518551][T10006] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2040.524913][T10006] netlink_rcv_skb+0x235/0x4c0 [ 2040.529693][T10006] ? genl_bind+0x360/0x360 [ 2040.534129][T10006] ? netlink_ack+0x1160/0x1160 [ 2040.538918][T10006] ? __lock_acquire+0x7d80/0x7d80 [ 2040.543968][T10006] ? down_read+0x1ac/0x2e0 [ 2040.548412][T10006] genl_rcv+0x28/0x40 [ 2040.552415][T10006] netlink_unicast+0x7b1/0x930 [ 2040.557205][T10006] netlink_sendmsg+0x8d0/0xbf0 [ 2040.562007][T10006] ? netlink_getsockopt+0x590/0x590 [ 2040.567236][T10006] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2040.572808][T10006] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2040.578118][T10006] ? security_socket_sendmsg+0x80/0xa0 [ 2040.583589][T10006] ? netlink_getsockopt+0x590/0x590 [ 2040.588812][T10006] ____sys_sendmsg+0x61b/0x980 [ 2040.593621][T10006] ? __asan_memset+0x22/0x40 [ 2040.598239][T10006] ? __sys_sendmsg_sock+0x30/0x30 [ 2040.603280][T10006] ? __import_iovec+0x5f2/0x850 [ 2040.608161][T10006] ? import_iovec+0x73/0xa0 [ 2040.612691][T10006] ___sys_sendmsg+0x2a6/0x360 [ 2040.617401][T10006] ? __sys_sendmsg+0x2b0/0x2b0 [ 2040.622257][T10006] __se_sys_sendmsg+0x1d0/0x2c0 [ 2040.627140][T10006] ? __x64_sys_sendmsg+0x80/0x80 [ 2040.632131][T10006] ? lockdep_hardirqs_on+0x98/0x150 [ 2040.637370][T10006] do_syscall_64+0x55/0xb0 [ 2040.641811][T10006] ? clear_bhb_loop+0x40/0x90 [ 2040.646514][T10006] ? clear_bhb_loop+0x40/0x90 [ 2040.651227][T10006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2040.658103][T10006] RIP: 0033:0x7f8f7319e159 [ 2040.662533][T10006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2040.682158][T10006] RSP: 002b:00007f8f73fc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2040.690604][T10006] RAX: ffffffffffffffda RBX: 00007f8f73426270 RCX: 00007f8f7319e159 [ 2040.698596][T10006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 2040.706581][T10006] RBP: 00007f8f73235024 R08: 0000000000000000 R09: 0000000000000000 [ 2040.714566][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2040.722550][T10006] R13: 00007f8f73426308 R14: 00007f8f73426270 R15: 00007ffe348aa738 [ 2040.730562][T10006] [ 2041.542435][T10041] syzkaller0: entered promiscuous mode [ 2041.548577][T10041] syzkaller0: entered allmulticast mode [ 2043.937419][ T9367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2045.190833][T10053] sit0: left promiscuous mode [ 2045.215125][T10058] sit0: entered promiscuous mode [ 2045.692330][T10086] netlink: 'syz.1.10397': attribute type 3 has an invalid length. [ 2045.709180][T10091] netlink: 'syz.2.10399': attribute type 21 has an invalid length. [ 2045.719367][T10086] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.10397'. [ 2045.904656][T10095] netlink: 173752 bytes leftover after parsing attributes in process `syz.0.10400'. [ 2047.135478][T10954] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2047.944940][T10135] FAULT_INJECTION: forcing a failure. [ 2047.944940][T10135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2047.985222][T10135] CPU: 1 PID: 10135 Comm: syz.1.10412 Not tainted syzkaller #0 [ 2047.992835][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2048.002907][T10135] Call Trace: [ 2048.006203][T10135] [ 2048.009145][T10135] dump_stack_lvl+0x18c/0x250 [ 2048.013852][T10135] ? show_regs_print_info+0x20/0x20 [ 2048.019074][T10135] ? load_image+0x420/0x420 [ 2048.023595][T10135] ? __might_fault+0xaa/0x120 [ 2048.028297][T10135] ? __lock_acquire+0x7d80/0x7d80 [ 2048.033338][T10135] ? __virt_addr_valid+0x10c/0x380 [ 2048.038473][T10135] should_fail_ex+0x394/0x4c0 [ 2048.043183][T10135] _copy_from_user+0x2f/0xe0 [ 2048.047792][T10135] sctp_setsockopt+0x19e/0x11e0 [ 2048.052773][T10135] ? sock_common_recvmsg+0x190/0x190 [ 2048.058080][T10135] do_sock_setsockopt+0x175/0x1a0 [ 2048.063127][T10135] ? __fdget+0x180/0x210 [ 2048.067391][T10135] __x64_sys_setsockopt+0x182/0x200 [ 2048.072613][T10135] do_syscall_64+0x55/0xb0 [ 2048.077050][T10135] ? clear_bhb_loop+0x40/0x90 [ 2048.081748][T10135] ? clear_bhb_loop+0x40/0x90 [ 2048.086449][T10135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2048.092360][T10135] RIP: 0033:0x7f250a39e159 [ 2048.096791][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2048.116412][T10135] RSP: 002b:00007f250b257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2048.124848][T10135] RAX: ffffffffffffffda RBX: 00007f250a625fa0 RCX: 00007f250a39e159 [ 2048.132839][T10135] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003 [ 2048.140833][T10135] RBP: 00007f250b257090 R08: 0000000000000129 R09: 0000000000000000 [ 2048.148819][T10135] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 2048.156804][T10135] R13: 00007f250a626038 R14: 00007f250a625fa0 R15: 00007ffd3ca42dd8 [ 2048.164811][T10135] [ 2048.542033][T10147] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10418'. [ 2048.629411][T10147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2048.736115][T10151] netlink: 'syz.1.10418': attribute type 10 has an invalid length. [ 2048.763299][T10151] hsr0: entered promiscuous mode [ 2048.799465][T10151] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2048.835314][T10151] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2048.847902][T10151] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2048.876093][T10151] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2048.887689][T10147] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10418'. [ 2048.910172][T10147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2048.950276][T10152] netlink: 'syz.1.10418': attribute type 10 has an invalid length. [ 2048.968689][T10152] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2048.992746][T10152] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2049.006372][T10152] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2049.035226][T10152] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2049.460750][T10172] FAULT_INJECTION: forcing a failure. [ 2049.460750][T10172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2049.498897][T10172] CPU: 1 PID: 10172 Comm: syz.3.10423 Not tainted syzkaller #0 [ 2049.506497][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2049.516574][T10172] Call Trace: [ 2049.519867][T10172] [ 2049.522808][T10172] dump_stack_lvl+0x18c/0x250 [ 2049.527513][T10172] ? show_regs_print_info+0x20/0x20 [ 2049.532728][T10172] ? load_image+0x420/0x420 [ 2049.537251][T10172] ? __lock_acquire+0x7d80/0x7d80 [ 2049.542300][T10172] ? snprintf+0xe9/0x140 [ 2049.546556][T10172] should_fail_ex+0x394/0x4c0 [ 2049.551248][T10172] _copy_to_user+0x2f/0xa0 [ 2049.555670][T10172] simple_read_from_buffer+0xe7/0x150 [ 2049.561049][T10172] proc_fail_nth_read+0x1e8/0x260 [ 2049.566082][T10172] ? proc_fault_inject_write+0x360/0x360 [ 2049.571716][T10172] ? fsnotify_perm+0x271/0x5e0 [ 2049.576477][T10172] ? proc_fault_inject_write+0x360/0x360 [ 2049.582117][T10172] vfs_read+0x298/0x990 [ 2049.586292][T10172] ? kernel_read+0x1e0/0x1e0 [ 2049.590894][T10172] ? __fget_files+0x28/0x460 [ 2049.595489][T10172] ? __fget_files+0x3fc/0x460 [ 2049.600178][T10172] ? __fdget_pos+0x2a3/0x330 [ 2049.604769][T10172] ? ksys_read+0x74/0x260 [ 2049.609104][T10172] ksys_read+0x151/0x260 [ 2049.613356][T10172] ? vfs_write+0x9a0/0x9a0 [ 2049.617782][T10172] ? lockdep_hardirqs_on+0x98/0x150 [ 2049.622990][T10172] do_syscall_64+0x55/0xb0 [ 2049.627404][T10172] ? clear_bhb_loop+0x40/0x90 [ 2049.632082][T10172] ? clear_bhb_loop+0x40/0x90 [ 2049.636761][T10172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2049.642653][T10172] RIP: 0033:0x7ffbc8b5e98e [ 2049.647070][T10172] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2049.666672][T10172] RSP: 002b:00007ffbc99dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2049.675082][T10172] RAX: ffffffffffffffda RBX: 00007ffbc99db6c0 RCX: 00007ffbc8b5e98e [ 2049.683053][T10172] RDX: 000000000000000f RSI: 00007ffbc99db0a0 RDI: 0000000000000004 [ 2049.691024][T10172] RBP: 00007ffbc99db090 R08: 0000000000000000 R09: 0000000000000000 [ 2049.698990][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.706955][T10172] R13: 00007ffbc8e26038 R14: 00007ffbc8e25fa0 R15: 00007ffcdda027c8 [ 2049.714955][T10172] [ 2049.900407][T10178] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.10424'. [ 2049.911887][T10179] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.10424'. [ 2049.921930][T10179] openvswitch: netlink: Duplicate key (type 0). [ 2050.121713][T10183] netlink: 'syz.3.10426': attribute type 29 has an invalid length. [ 2050.649351][T10183] netlink: 'syz.3.10426': attribute type 29 has an invalid length. [ 2050.951796][T10197] netlink: 'syz.2.10430': attribute type 29 has an invalid length. [ 2050.974809][T10197] netlink: 'syz.2.10430': attribute type 29 has an invalid length. [ 2050.999502][T10198] netlink: 'syz.2.10430': attribute type 29 has an invalid length. [ 2051.060787][T10203] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.10431'. [ 2052.921986][T10241] syzkaller0: entered promiscuous mode [ 2052.936814][T10241] syzkaller0: entered allmulticast mode [ 2054.087759][T10254] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10446'. [ 2056.062715][T10249] netlink: 'syz.0.10443': attribute type 10 has an invalid length. [ 2056.072657][T10249] hsr0: entered promiscuous mode [ 2056.079685][T10249] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2056.103520][T10249] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2056.125529][T10249] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2056.143956][T10249] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2056.670641][T10282] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10455'. [ 2057.458739][T10292] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.10457'. [ 2057.492082][T10297] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.10457'. [ 2057.703081][T10307] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10462'. [ 2057.942365][T10321] netlink: 'syz.0.10466': attribute type 21 has an invalid length. [ 2057.951981][T10321] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10466'. [ 2057.962912][T10321] netlink: 'syz.0.10466': attribute type 4 has an invalid length. [ 2057.974672][T10321] netlink: 'syz.0.10466': attribute type 5 has an invalid length. [ 2057.992894][T10321] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10466'. [ 2058.497900][T10331] netlink: 'syz.2.10468': attribute type 29 has an invalid length. [ 2058.721522][T10331] netlink: 'syz.2.10468': attribute type 29 has an invalid length. [ 2058.733089][T10332] netlink: 'syz.2.10468': attribute type 29 has an invalid length. [ 2058.742238][T10333] netlink: 'syz.2.10468': attribute type 29 has an invalid length. [ 2058.752315][T10334] netlink: 'syz.2.10468': attribute type 29 has an invalid length. [ 2059.080148][T10345] netlink: 'syz.1.10471': attribute type 3 has an invalid length. [ 2059.115629][T10345] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.10471'. [ 2059.196732][T10349] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10473'. [ 2059.500237][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2059.510057][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2059.518363][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2059.551687][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2059.576124][ T5826] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2059.589380][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2059.857897][T10354] chnl_net:caif_netlink_parms(): no params data found [ 2060.031417][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 2060.044187][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.054264][T10354] bridge_slave_0: entered allmulticast mode [ 2060.068660][T10354] bridge_slave_0: entered promiscuous mode [ 2060.083217][T10354] bridge0: port 2(bridge_slave_1) entered blocking state [ 2060.092981][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.108355][T10354] bridge_slave_1: entered allmulticast mode [ 2060.116401][T10354] bridge_slave_1: entered promiscuous mode [ 2060.182413][T10354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2060.201875][T10354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2060.272759][T10354] team0: Port device team_slave_0 added [ 2060.288603][T10354] team0: Port device team_slave_1 added [ 2060.341722][T10354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.354898][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.384310][T10354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.405656][T10354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.412889][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2060.448195][T10354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.561101][T10354] hsr_slave_0: entered promiscuous mode [ 2060.601635][T10354] hsr_slave_1: entered promiscuous mode [ 2060.626072][T10354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2060.641502][T10354] Cannot create hsr debugfs directory [ 2060.718813][T10958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.806158][T10379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10480'. [ 2060.871643][T10958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.971629][T10376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10481'. [ 2061.067440][T10958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.197691][T10958] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2061.608359][T10391] validate_nla: 5 callbacks suppressed [ 2061.608397][T10391] netlink: 'syz.1.10485': attribute type 10 has an invalid length. [ 2061.695708][ T9051] Bluetooth: hci4: command tx timeout [ 2062.623208][T10402] netlink: 'syz.1.10488': attribute type 10 has an invalid length. [ 2062.634337][T10402] __nla_validate_parse: 2 callbacks suppressed [ 2062.634352][T10402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10488'. [ 2062.660682][T10402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2062.937220][T10417] netlink: 'syz.0.10489': attribute type 10 has an invalid length. [ 2063.020778][T10417] team0: Device wg1 is of different type [ 2063.776305][ T9051] Bluetooth: hci4: command tx timeout [ 2064.761577][T10461] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 2065.482283][T10459] delete_channel: no stack [ 2065.865444][ T9051] Bluetooth: hci4: command tx timeout [ 2066.191715][T10354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2066.213929][T10460] netlink: 'syz.1.10503': attribute type 39 has an invalid length. [ 2066.252418][T10460] bond0: (slave macvlan0): Releasing backup interface [ 2066.278675][T10354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2066.321073][T10354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2066.349510][T10354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2067.762924][T10354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2067.784522][T10499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10511'. [ 2067.803994][T10499] netlink: 'syz.0.10511': attribute type 21 has an invalid length. [ 2067.935602][ T9051] Bluetooth: hci4: command tx timeout [ 2068.001022][T10502] netlink: 'syz.1.10509': attribute type 10 has an invalid length. [ 2068.064118][T10502] mac80211_hwsim hwsim146 wlan1: entered promiscuous mode [ 2068.080690][T10502] mac80211_hwsim hwsim146 wlan1: entered allmulticast mode [ 2068.100872][T10506] netlink: 'syz.3.10512': attribute type 1 has an invalid length. [ 2068.114574][T10502] team0: Port device wlan1 added [ 2068.121166][T10506] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.10512'. [ 2068.131854][T10354] 8021q: adding VLAN 0 to HW filter on device team0 [ 2068.187284][T10506] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10512'. [ 2068.263239][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.270462][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2068.315457][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.322630][ T6319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2068.468914][T10958] hsr_slave_0: left promiscuous mode [ 2068.538987][T10958] hsr_slave_1: left promiscuous mode [ 2068.551077][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2068.562169][T10958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2068.577374][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2068.584942][T10958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2068.599156][T10958] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 2068.606900][T10958] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 2068.650909][T10958] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2068.659845][T10958] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2068.834235][T10958] veth1_macvtap: left promiscuous mode [ 2068.839904][T10958] veth0_macvtap: left promiscuous mode [ 2068.855381][T10958] veth1_vlan: left promiscuous mode [ 2068.860664][T10958] veth0_vlan: left promiscuous mode [ 2070.123320][T10542] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.10521'. [ 2070.324379][T10539] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10520'. [ 2070.338620][T10542] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.10521'. [ 2070.819738][T10561] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10523'. [ 2070.838034][T10561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2070.928410][T10556] tap0: tun_chr_ioctl cmd 1074025676 [ 2070.933991][T10556] tap0: owner set to 776 [ 2071.341698][T10354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2071.917583][T10354] veth0_vlan: entered promiscuous mode [ 2072.083087][T10354] veth1_vlan: entered promiscuous mode [ 2072.291549][T10354] veth0_macvtap: entered promiscuous mode [ 2072.336845][T10354] veth1_macvtap: entered promiscuous mode [ 2072.475442][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.515644][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.565621][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2072.593444][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.627241][T10354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2072.661881][T10594] netlink: 'syz.0.10532': attribute type 21 has an invalid length. [ 2072.676688][T10594] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10532'. [ 2072.716034][T10595] netlink: 'syz.0.10532': attribute type 21 has an invalid length. [ 2072.724994][T10595] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10532'. [ 2072.736070][T10596] sit0: entered allmulticast mode [ 2072.874716][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.921543][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.964097][T10354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.979257][T10354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.033068][T10354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2073.078807][T10354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.091153][T10354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.099970][T10354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.109000][T10354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2073.473083][ T3833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.507404][ T3833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.583117][T10958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.611581][T10958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.977631][T10619] netlink: 121180 bytes leftover after parsing attributes in process `syz.0.10537'. [ 2074.454240][T10630] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.10542'. [ 2074.607867][T10633] netlink: 'syz.3.10544': attribute type 21 has an invalid length. [ 2074.626485][T10633] netlink: 'syz.3.10544': attribute type 3 has an invalid length. [ 2074.636703][T10633] netlink: 144 bytes leftover after parsing attributes in process `syz.3.10544'. [ 2075.060746][T10652] netlink: 'syz.2.10548': attribute type 21 has an invalid length. [ 2075.117527][T10652] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10548'. [ 2075.183476][T10658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10551'. [ 2075.199317][T10658] netlink: 'syz.3.10551': attribute type 9 has an invalid length. [ 2075.210806][T10658] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.10551'. [ 2075.305562][T10958] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2075.960888][T10686] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.10561'. [ 2076.242365][T10696] netlink: 'syz.1.10565': attribute type 10 has an invalid length. [ 2076.278894][T10696] veth0_macvtap: left promiscuous mode [ 2076.827248][T10708] delete_channel: no stack [ 2076.890774][T10713] netlink: 'syz.3.10571': attribute type 10 has an invalid length. [ 2076.940940][T10713] netlink: 168 bytes leftover after parsing attributes in process `syz.3.10571'. [ 2077.695275][T10719] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.10574'. [ 2077.987607][T10745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10583'. [ 2078.280954][T10749] netlink: 'syz.2.10585': attribute type 29 has an invalid length. [ 2078.352965][T10749] netlink: 'syz.2.10585': attribute type 29 has an invalid length. [ 2078.403385][T10756] netlink: 'syz.2.10585': attribute type 29 has an invalid length. [ 2078.435975][T10764] netlink: 'syz.2.10585': attribute type 29 has an invalid length. [ 2079.219595][T10779] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.10590'. [ 2079.341003][T10779] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10590'. [ 2079.634753][T10783] wg1: entered promiscuous mode [ 2079.649759][T10783] wg1: entered allmulticast mode [ 2079.655966][T10783] team0: Device wg1 is of different type [ 2079.807857][T10790] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.10594'. [ 2080.880692][ T9051] Bluetooth: hci1: ISO packet for unknown connection handle 2878 [ 2080.973208][T10814] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.10604'. [ 2081.004537][T10814] openvswitch: netlink: IP tunnel dst address not specified [ 2084.032681][T10822] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.10607'. [ 2084.068251][T10844] validate_nla: 3 callbacks suppressed [ 2084.068266][T10844] netlink: 'syz.0.10612': attribute type 10 has an invalid length. [ 2084.106784][T10844] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.119438][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.126645][T10844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.153862][T10844] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2084.402193][T10854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10616'. [ 2084.572537][T10862] netlink: 'syz.0.10619': attribute type 2 has an invalid length. [ 2084.581072][T10862] netlink: 'syz.0.10619': attribute type 8 has an invalid length. [ 2084.591257][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10619'. [ 2084.607808][T10862] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.10619'. [ 2085.534952][T10886] netlink: 'syz.2.10628': attribute type 19 has an invalid length. [ 2085.553120][T10886] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10628'. [ 2085.566342][T10888] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10626'. [ 2085.629585][T10888] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.10626'. [ 2089.754710][T10934] netlink: 'syz.2.10643': attribute type 5 has an invalid length. [ 2089.895323][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10650'. [ 2089.915285][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10650'. [ 2089.956359][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10650'. [ 2089.986108][T10949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10650'. [ 2090.145238][T10959] netlink: 'syz.1.10648': attribute type 10 has an invalid length. [ 2090.201290][T10959] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 2090.227999][T10959] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 2090.244546][T10959] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 2090.290519][T10959] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 2090.364483][T10959] team0: Port device netdevsim0 added [ 2090.628445][T10965] syzkaller0: entered promiscuous mode [ 2090.668402][T10965] syzkaller0: entered allmulticast mode [ 2094.073652][T11020] netlink: 'syz.3.10666': attribute type 10 has an invalid length. [ 2094.113564][T11020] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2094.194831][T11020] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2094.251809][T11020] team0: Port device netdevsim0 added [ 2096.517440][T11054] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10674'. [ 2097.444979][T11072] netlink: 'syz.2.10679': attribute type 10 has an invalid length. [ 2097.745956][T11072] team0: Port device netdevsim0 added [ 2097.875757][T11086] netlink: 'syz.3.10680': attribute type 21 has an invalid length. [ 2097.907509][T11086] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10680'. [ 2098.437261][T11102] netlink: 'syz.2.10685': attribute type 1 has an invalid length. [ 2098.445117][T11102] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.10685'. [ 2098.495220][T11102] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10685'. [ 2098.650179][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10689'. [ 2098.983339][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.990833][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.743465][T11129] netlink: 'syz.0.10692': attribute type 10 has an invalid length. [ 2099.868680][T11129] team0: Port device ÿÿÿÿÿÿ added [ 2101.456029][T11157] netlink: 'syz.2.10703': attribute type 10 has an invalid length. [ 2101.506066][T11157] 8021q: adding VLAN 0 to HW filter on device team0 [ 2101.527443][T11157] bond0: (slave team0): Enslaving as an active interface with an up link [ 2103.761141][T11236] netlink: 'syz.1.10727': attribute type 1 has an invalid length. [ 2103.804958][T11238] netlink: 26 bytes leftover after parsing attributes in process `syz.1.10727'. [ 2106.685689][T11247] ================================================================== [ 2106.693813][T11247] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 2106.701637][T11247] Write of size 72 at addr ffff888083e77d90 by task syz.0.10737/11247 [ 2106.709792][T11247] [ 2106.712116][T11247] CPU: 0 PID: 11247 Comm: syz.0.10737 Not tainted syzkaller #0 [ 2106.719669][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2106.729738][T11247] Call Trace: [ 2106.733018][T11247] [ 2106.735953][T11247] dump_stack_lvl+0x18c/0x250 [ 2106.740651][T11247] ? read_lock_is_recursive+0x20/0x20 [ 2106.746036][T11247] ? show_regs_print_info+0x20/0x20 [ 2106.751246][T11247] ? load_image+0x420/0x420 [ 2106.755758][T11247] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 2106.761226][T11247] ? __virt_addr_valid+0x10c/0x380 [ 2106.766358][T11247] ? __virt_addr_valid+0x10c/0x380 [ 2106.771478][T11247] ? __virt_addr_valid+0x10c/0x380 [ 2106.776601][T11247] print_report+0xa8/0x210 [ 2106.781059][T11247] ? __bpf_get_stackid+0x6c7/0x900 [ 2106.786183][T11247] kasan_report+0x117/0x150 [ 2106.790703][T11247] ? __bpf_get_stackid+0x6c7/0x900 [ 2106.795826][T11247] kasan_check_range+0x241/0x290 [ 2106.800773][T11247] ? __bpf_get_stackid+0x6c7/0x900 [ 2106.805893][T11247] __asan_memcpy+0x40/0x70 [ 2106.810323][T11247] __bpf_get_stackid+0x6c7/0x900 [ 2106.815277][T11247] bpf_get_stackid_pe+0x343/0x410 [ 2106.820316][T11247] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 2106.825787][T11247] bpf_overflow_handler+0x1fc/0x510 [ 2106.830997][T11247] ? perf_prepare_header+0x1e0/0x1e0 [ 2106.836294][T11247] ? bpf_overflow_handler+0xde/0x510 [ 2106.841609][T11247] ? tp_perf_event_destroy+0x20/0x20 [ 2106.846902][T11247] ? perf_trace_preemptirq_template+0xac/0x330 [ 2106.853069][T11247] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2106.860277][T11247] ? __perf_event_account_interrupt+0x187/0x280 [ 2106.866522][T11247] __perf_event_overflow+0x461/0x660 [ 2106.871806][T11247] perf_swevent_event+0x319/0x570 [ 2106.876847][T11247] ? perf_tp_event+0x1550/0x1550 [ 2106.881798][T11247] ___perf_sw_event+0x4ab/0x730 [ 2106.886660][T11247] ? ___perf_sw_event+0x19e/0x730 [ 2106.891700][T11247] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2106.898125][T11247] ? __lock_acquire+0x1336/0x7d80 [ 2106.903163][T11247] ? rep_movs_alternative+0x30/0x90 [ 2106.908382][T11247] ? verify_lock_unused+0x140/0x140 [ 2106.913587][T11247] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2106.919576][T11247] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 2106.925397][T11247] ? lock_chain_count+0x20/0x20 [ 2106.930261][T11247] __perf_sw_event+0x139/0x270 [ 2106.935039][T11247] do_user_addr_fault+0x1242/0x12d0 [ 2106.940252][T11247] ? rcu_is_watching+0x15/0xb0 [ 2106.945031][T11247] exc_page_fault+0x64/0x100 [ 2106.949645][T11247] asm_exc_page_fault+0x26/0x30 [ 2106.954524][T11247] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 2106.960348][T11247] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 2106.979961][T11247] RSP: 0018:ffffc9000f08fb48 EFLAGS: 00050216 [ 2106.986038][T11247] RAX: ffffffff8433b501 RBX: 0000000000000020 RCX: 0000000000000020 [ 2106.994009][T11247] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000f263048 [ 2107.001960][T11247] RBP: 0000000000000000 R08: ffffc9000f263067 R09: 1ffff92001e4c60c [ 2107.009913][T11247] R10: dffffc0000000000 R11: fffff52001e4c60d R12: 0000000000000020 [ 2107.017866][T11247] R13: dffffc0000000000 R14: ffffc9000f263048 R15: 0000000000000000 [ 2107.025836][T11247] ? _copy_from_user+0x21/0xe0 [ 2107.030606][T11247] _copy_from_user+0x8b/0xe0 [ 2107.035184][T11247] copy_from_bpfptr+0x67/0x80 [ 2107.039877][T11247] bpf_prog_load+0xa3a/0x1610 [ 2107.044573][T11247] ? map_freeze+0x420/0x420 [ 2107.049093][T11247] ? __might_fault+0xaa/0x120 [ 2107.053762][T11247] ? __might_fault+0xc6/0x120 [ 2107.058428][T11247] ? __might_fault+0xaa/0x120 [ 2107.063112][T11247] ? bpf_lsm_bpf+0x9/0x10 [ 2107.067451][T11247] ? security_bpf+0x7e/0xa0 [ 2107.071966][T11247] __sys_bpf+0x5ba/0x890 [ 2107.076216][T11247] ? bpf_link_show_fdinfo+0x390/0x390 [ 2107.081606][T11247] ? lock_chain_count+0x20/0x20 [ 2107.086477][T11247] __x64_sys_bpf+0x7c/0x90 [ 2107.090900][T11247] do_syscall_64+0x55/0xb0 [ 2107.095316][T11247] ? clear_bhb_loop+0x40/0x90 [ 2107.099992][T11247] ? clear_bhb_loop+0x40/0x90 [ 2107.104671][T11247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.110558][T11247] RIP: 0033:0x7f2aa179e159 [ 2107.114964][T11247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2107.134558][T11247] RSP: 002b:00007f2aa25f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2107.142966][T11247] RAX: ffffffffffffffda RBX: 00007f2aa1a25fa0 RCX: 00007f2aa179e159 [ 2107.150930][T11247] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 2107.158889][T11247] RBP: 00007f2aa1835024 R08: 0000000000000000 R09: 0000000000000000 [ 2107.166847][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2107.174807][T11247] R13: 00007f2aa1a26038 R14: 00007f2aa1a25fa0 R15: 00007ffd5892c828 [ 2107.182773][T11247] [ 2107.185780][T11247] [ 2107.188095][T11247] Allocated by task 11249: [ 2107.192495][T11247] kasan_set_track+0x4e/0x70 [ 2107.197080][T11247] __kasan_kmalloc+0x8f/0xa0 [ 2107.201663][T11247] __kmalloc_node+0xb6/0x240 [ 2107.206247][T11247] bpf_map_area_alloc+0x5e/0x110 [ 2107.211185][T11247] prealloc_elems_and_freelist+0x86/0x1c0 [ 2107.216897][T11247] stack_map_alloc+0x32b/0x4b0 [ 2107.221656][T11247] map_create+0x877/0x12f0 [ 2107.226058][T11247] __sys_bpf+0x651/0x890 [ 2107.230317][T11247] __x64_sys_bpf+0x7c/0x90 [ 2107.234728][T11247] do_syscall_64+0x55/0xb0 [ 2107.239135][T11247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.245020][T11247] [ 2107.247333][T11247] Last potentially related work creation: [ 2107.253031][T11247] kasan_save_stack+0x3e/0x60 [ 2107.257698][T11247] __kasan_record_aux_stack+0xaf/0xc0 [ 2107.263059][T11247] call_rcu+0x153/0x900 [ 2107.267207][T11247] nf_unregister_net_hooks+0xcb/0x130 [ 2107.272674][T11247] ipvlan_uninit+0x297/0x500 [ 2107.277272][T11247] unregister_netdevice_many_notify+0x1357/0x1910 [ 2107.283677][T11247] default_device_exit_batch+0x962/0xa00 [ 2107.289303][T11247] cleanup_net+0x792/0xbb0 [ 2107.293706][T11247] process_scheduled_works+0xa60/0x1600 [ 2107.299241][T11247] worker_thread+0xa5e/0xfe0 [ 2107.303820][T11247] kthread+0x2fa/0x390 [ 2107.307876][T11247] ret_from_fork+0x48/0x80 [ 2107.312283][T11247] ret_from_fork_asm+0x11/0x20 [ 2107.317039][T11247] [ 2107.319347][T11247] Second to last potentially related work creation: [ 2107.325914][T11247] kasan_save_stack+0x3e/0x60 [ 2107.330582][T11247] __kasan_record_aux_stack+0xaf/0xc0 [ 2107.335946][T11247] call_rcu+0x153/0x900 [ 2107.340099][T11247] nf_unregister_net_hooks+0xcb/0x130 [ 2107.345464][T11247] nf_ct_netns_put+0x2d2/0x520 [ 2107.350221][T11247] nf_conncount_destroy+0x41/0x150 [ 2107.355400][T11247] ovs_ct_exit+0x9c/0x200 [ 2107.359751][T11247] ovs_exit_net+0xed/0x7a0 [ 2107.364155][T11247] cleanup_net+0x707/0xbb0 [ 2107.368558][T11247] process_scheduled_works+0xa60/0x1600 [ 2107.374097][T11247] worker_thread+0xa5e/0xfe0 [ 2107.378681][T11247] kthread+0x2fa/0x390 [ 2107.382738][T11247] ret_from_fork+0x48/0x80 [ 2107.387146][T11247] ret_from_fork_asm+0x11/0x20 [ 2107.391901][T11247] [ 2107.394209][T11247] The buggy address belongs to the object at ffff888083e77d80 [ 2107.394209][T11247] which belongs to the cache kmalloc-cg-64 of size 64 [ 2107.408334][T11247] The buggy address is located 16 bytes inside of [ 2107.408334][T11247] allocated 40-byte region [ffff888083e77d80, ffff888083e77da8) [ 2107.422289][T11247] [ 2107.424600][T11247] The buggy address belongs to the physical page: [ 2107.431014][T11247] page:ffffea00020f9dc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888083e77080 pfn:0x83e77 [ 2107.442457][T11247] memcg:ffff88806bc82801 [ 2107.446683][T11247] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 2107.454213][T11247] page_type: 0xffffffff() [ 2107.458531][T11247] raw: 00fff00000000800 ffff888017c4da00 ffffea00007cacc0 dead000000000002 [ 2107.467101][T11247] raw: ffff888083e77080 000000008020001e 00000001ffffffff ffff88806bc82801 [ 2107.475666][T11247] page dumped because: kasan: bad access detected [ 2107.482076][T11247] page_owner tracks the page as allocated [ 2107.487773][T11247] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 31468, tgid 31468 (syz-executor), ts 1621780120718, free_ts 1619906899610 [ 2107.506513][T11247] post_alloc_hook+0x1c1/0x200 [ 2107.511275][T11247] get_page_from_freelist+0x2181/0x22a0 [ 2107.516829][T11247] __alloc_pages+0x1f0/0x460 [ 2107.521405][T11247] alloc_slab_page+0x5d/0x180 [ 2107.526070][T11247] new_slab+0x87/0x2d0 [ 2107.530124][T11247] ___slab_alloc+0xc5c/0x12f0 [ 2107.534787][T11247] __kmem_cache_alloc_node+0x11f/0x250 [ 2107.540239][T11247] kmalloc_trace+0x2a/0xe0 [ 2107.544647][T11247] alloc_fdtable+0xca/0x2c0 [ 2107.549144][T11247] dup_fd+0x747/0xa20 [ 2107.553116][T11247] copy_files+0xaf/0x110 [ 2107.557345][T11247] copy_process+0x157d/0x3da0 [ 2107.562007][T11247] kernel_clone+0x24b/0x8a0 [ 2107.566500][T11247] __x64_sys_clone+0x1b7/0x230 [ 2107.571252][T11247] do_syscall_64+0x55/0xb0 [ 2107.575658][T11247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.581539][T11247] page last free stack trace: [ 2107.586197][T11247] free_unref_page_prepare+0x7d7/0x8f0 [ 2107.591643][T11247] free_unref_page+0x32/0x2e0 [ 2107.596306][T11247] vfree+0x1a7/0x340 [ 2107.600191][T11247] btf_free+0x1e7/0x220 [ 2107.604342][T11247] btf_new_fd+0x58a/0x9e0 [ 2107.608661][T11247] __sys_bpf+0x670/0x890 [ 2107.612889][T11247] __x64_sys_bpf+0x7c/0x90 [ 2107.617292][T11247] do_syscall_64+0x55/0xb0 [ 2107.621696][T11247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.627579][T11247] [ 2107.629896][T11247] Memory state around the buggy address: [ 2107.635510][T11247] ffff888083e77c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2107.643560][T11247] ffff888083e77d00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2107.651614][T11247] >ffff888083e77d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 2107.659655][T11247] ^ [ 2107.665010][T11247] ffff888083e77e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2107.673056][T11247] ffff888083e77e80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 2107.681100][T11247] ================================================================== [ 2107.689158][T11247] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2107.696350][T11247] CPU: 0 PID: 11247 Comm: syz.0.10737 Not tainted syzkaller #0 [ 2107.703883][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2107.713924][T11247] Call Trace: [ 2107.717200][T11247] [ 2107.720122][T11247] dump_stack_lvl+0x18c/0x250 [ 2107.724798][T11247] ? show_regs_print_info+0x20/0x20 [ 2107.730028][T11247] ? load_image+0x420/0x420 [ 2107.734527][T11247] panic+0x2ca/0x720 [ 2107.738420][T11247] ? __lock_acquire+0x7d80/0x7d80 [ 2107.743441][T11247] ? bpf_jit_dump+0xd0/0xd0 [ 2107.747947][T11247] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2107.753834][T11247] ? _raw_spin_unlock+0x40/0x40 [ 2107.758676][T11247] ? __bpf_get_stackid+0x6c7/0x900 [ 2107.763780][T11247] check_panic_on_warn+0x84/0xa0 [ 2107.768713][T11247] ? __bpf_get_stackid+0x6c7/0x900 [ 2107.773816][T11247] end_report+0x6f/0x130 [ 2107.778050][T11247] kasan_report+0x128/0x150 [ 2107.782548][T11247] ? __bpf_get_stackid+0x6c7/0x900 [ 2107.787656][T11247] kasan_check_range+0x241/0x290 [ 2107.792587][T11247] ? __bpf_get_stackid+0x6c7/0x900 [ 2107.797691][T11247] __asan_memcpy+0x40/0x70 [ 2107.802099][T11247] __bpf_get_stackid+0x6c7/0x900 [ 2107.807032][T11247] bpf_get_stackid_pe+0x343/0x410 [ 2107.812050][T11247] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 2107.817503][T11247] bpf_overflow_handler+0x1fc/0x510 [ 2107.822695][T11247] ? perf_prepare_header+0x1e0/0x1e0 [ 2107.827972][T11247] ? bpf_overflow_handler+0xde/0x510 [ 2107.833249][T11247] ? tp_perf_event_destroy+0x20/0x20 [ 2107.838528][T11247] ? perf_trace_preemptirq_template+0xac/0x330 [ 2107.844682][T11247] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2107.851883][T11247] ? __perf_event_account_interrupt+0x187/0x280 [ 2107.858118][T11247] __perf_event_overflow+0x461/0x660 [ 2107.863397][T11247] perf_swevent_event+0x319/0x570 [ 2107.868411][T11247] ? perf_tp_event+0x1550/0x1550 [ 2107.873342][T11247] ___perf_sw_event+0x4ab/0x730 [ 2107.878186][T11247] ? ___perf_sw_event+0x19e/0x730 [ 2107.883222][T11247] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 2107.889640][T11247] ? __lock_acquire+0x1336/0x7d80 [ 2107.894671][T11247] ? rep_movs_alternative+0x30/0x90 [ 2107.899875][T11247] ? verify_lock_unused+0x140/0x140 [ 2107.905071][T11247] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2107.911043][T11247] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 2107.916843][T11247] ? lock_chain_count+0x20/0x20 [ 2107.921684][T11247] __perf_sw_event+0x139/0x270 [ 2107.926448][T11247] do_user_addr_fault+0x1242/0x12d0 [ 2107.931645][T11247] ? rcu_is_watching+0x15/0xb0 [ 2107.936405][T11247] exc_page_fault+0x64/0x100 [ 2107.940991][T11247] asm_exc_page_fault+0x26/0x30 [ 2107.945837][T11247] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 2107.951639][T11247] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 2107.971241][T11247] RSP: 0018:ffffc9000f08fb48 EFLAGS: 00050216 [ 2107.977301][T11247] RAX: ffffffff8433b501 RBX: 0000000000000020 RCX: 0000000000000020 [ 2107.985277][T11247] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000f263048 [ 2107.993241][T11247] RBP: 0000000000000000 R08: ffffc9000f263067 R09: 1ffff92001e4c60c [ 2108.001200][T11247] R10: dffffc0000000000 R11: fffff52001e4c60d R12: 0000000000000020 [ 2108.009159][T11247] R13: dffffc0000000000 R14: ffffc9000f263048 R15: 0000000000000000 [ 2108.017123][T11247] ? _copy_from_user+0x21/0xe0 [ 2108.021885][T11247] _copy_from_user+0x8b/0xe0 [ 2108.026466][T11247] copy_from_bpfptr+0x67/0x80 [ 2108.031137][T11247] bpf_prog_load+0xa3a/0x1610 [ 2108.035807][T11247] ? map_freeze+0x420/0x420 [ 2108.040306][T11247] ? __might_fault+0xaa/0x120 [ 2108.044971][T11247] ? __might_fault+0xc6/0x120 [ 2108.049637][T11247] ? __might_fault+0xaa/0x120 [ 2108.054304][T11247] ? bpf_lsm_bpf+0x9/0x10 [ 2108.058627][T11247] ? security_bpf+0x7e/0xa0 [ 2108.063125][T11247] __sys_bpf+0x5ba/0x890 [ 2108.067361][T11247] ? bpf_link_show_fdinfo+0x390/0x390 [ 2108.072728][T11247] ? lock_chain_count+0x20/0x20 [ 2108.077572][T11247] __x64_sys_bpf+0x7c/0x90 [ 2108.081979][T11247] do_syscall_64+0x55/0xb0 [ 2108.086386][T11247] ? clear_bhb_loop+0x40/0x90 [ 2108.091057][T11247] ? clear_bhb_loop+0x40/0x90 [ 2108.095726][T11247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2108.101612][T11247] RIP: 0033:0x7f2aa179e159 [ 2108.106018][T11247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2108.125617][T11247] RSP: 002b:00007f2aa25f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2108.134017][T11247] RAX: ffffffffffffffda RBX: 00007f2aa1a25fa0 RCX: 00007f2aa179e159 [ 2108.141978][T11247] RDX: 0000000000000094 RSI: 0000200000002c80 RDI: 0000000000000005 [ 2108.149944][T11247] RBP: 00007f2aa1835024 R08: 0000000000000000 R09: 0000000000000000 [ 2108.157905][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2108.165864][T11247] R13: 00007f2aa1a26038 R14: 00007f2aa1a25fa0 R15: 00007ffd5892c828 [ 2108.173830][T11247] [ 2108.177089][T11247] Kernel Offset: disabled [ 2108.181400][T11247] Rebooting in 86400 seconds..