last executing test programs: 14.05120825s ago: executing program 1 (id=2284): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x801c581f, &(0x7f0000000040)=0xff57000000000600) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014) sendmsg(r7, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r8}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r7, r4, 0x22, 0x2b, r5, @void, @void, @void, @value=r8, r6}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r3, r2, 0x11, 0x20, 0x0, @void, @void, @void, @value=r8}, 0x20) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001340)={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r9 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x4}, 0x90, 0x4, 0x2, 0x1, 0xa1, 0x2d, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c55272afe4a39f80fec79674992739b3f1d46ab6fc6b89bc95d81d84d8c293613c9f90375e9112c7b5f65f27e0e214389e9034316b5f9b75aaba5bc0d8f2290bd36c6624c127b3433e77de62a43eb8eeecd139da8a083185e6bef3c0866b648a4f6432a60e58c664a7a3dcb4a1776e6fdb08687841d75cdf12f0d7578930caa6a450381441bd9023d757be41434aaa87208e070bae470b8ebe5b100c3d6ed01dbff6a6e13320627043926cb30d2233291a5d9a15bfb760df9fabaa9f450747ff1cf93258dfbd2132d00516d8edfcb6b6352eb385866585cb371846f31532e653ccf7bc842c81206c8e80530a748501b2da5fedb1bcd0e53d09826aeb25c7ed8f3e1b219649baf3fc9ccb0da4aa1bdefca77ca97aa0c50d0485413936b83a20158cc3795456df09a917751c6e9555988b80b26f36bc8294fa37aca1b0c570e93588c9c25f4d72f01ba4bb874685628f0b64d71eaa9d17b489826ada40cede73bad175b9e956942b581fb7c52added185ce2f24422c0bf33ff32bb0e9e50b697f3257eb76134076bcf59767d12dc2cfa9c6e4544b55adc09a330a873c3a5ac8e28dda7fe398be13b3949ddaa7e25fc9652b783a95db047a3477a64dee6c4eadccbb48e9a525539c51603f8fdf1a8af0b9968ea399b7d787ead48a43bb8f83ced7de9dbe9d29a04438103179d2cc91cc15a5f3b5c589594d5232f8e956776547946bd38ea993b2cd1b1290ba255ef4a1a97055ad51cff35b804ef472a9f60bfedf3af92fc51e9b9e5580d4b12ac5fae4d8a4b9761b1c72a7282fe1cbc90767ec3266aef7ccf306ba8fc5161c74c3765b6b1ad5ab007b9892aedca8fadc7b37597546de787034e2c98a34118ef63680882759f4c3cb654e050b1303d3c9ded614e54fc833992b3d376e9f581d2ef7064ff268359a022b0df7d0679a54746150528ce08d47a05dd0e1f481b0f0b27f25e8b7b0a17827841cd7711e84dae20d98a76e5c6ea29b7a676bc4afb5729705e235ab7d41cf6dc39a208e806db5077326345bff9910e8b591d9c45f506f57f0392c41dfbe0e788299582f1dc2323da8ba93a7141061c8f78f81518c59c41a289b98d83a4575e9a509c0c615cd39ae76d2749378047a3b4ca1078880a0620088c17661322632882c77f751c60443e27df36020a72081b8e32f796f103412721158831ad7658a1299015a8a28ebc4cfd1414f4f4dcdef109c2bd75b7a8d83447e382724ec1076237c85b311df47a4fa7ad981e0f3918a093855e9968364c9bd1f385fccf076bc9e61558ddbe969742a860599a87e045b8fd95b0eb11b1f0fbdcb8a4008da5277f071d819791a2f54fc9f676196cf0b3f0e91c6d1586d9bd687c1df1e759e80b0cea66ea75eef5f9e57a36f61670268b8e2ad39561525e73fe2c942d0fb3f53e46695762c0dcee78ca9b2b81cba1c5fa2a736954dedcdf869149c7220be1f4ea53ccd72c3f8f7d9483068d668542023ea9a3d415a2006a5ac5439668c0a211c9d3212d38cdc13c35bf184579955fff0c35b2870af088340d60f744a0806135ce50a123182ab68fa8a89d858eceeed660f1ec5671d6d1be21022c372eabfa4fb1ebe03f7ab2650ec3679507d17611d1cd694be1adb33e591716af45eb1269969aca77be07d18784e2dd1240b6ac67be842afa51ce452f106de37a1e271b37e2904d6276c09eb5915fc8af524ff86e652c2acd33b634d8ba9268b7c278ebb8a92d7a45d97d2e45b4064b55ed5c56d3ed11adc0c", 0xfdef}], 0x1}, 0x48800) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4) sendmsg$inet(r0, &(0x7f0000003d40)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003c80)=[{&(0x7f0000001b40)="f126e0a9a8dcd9f5b8ade9fdfba39ab2713d1cdb28767fbbe4674c082ee661fbe676d7750843c7ff909be07afc46b1cb4bb21592186bddd0e38d06b0f078cd70b9dffeb0cd6072be6069ede2b9ca9baccc92da6655fff64c759b230635f47b60c1cc3521866d46c69a4b974dd073abb05baa5aa081f08644fb963a81982dc3c56524d86af0a00f05c9e52ef46b00813fdd9e4024b997f925e57cbe6a5fa1427f023a5548374ba44c15511ec27b67cc96b3a0385f33a6027f89c64d96b90d7434dae3f8ba3d6ef5d7952136b001428326ab86bd723cc86dd51ee5306412ec104f89bbfbb2ab19104132a80447ec1b2f4623a6a82a2165aa8d0aa9aa86748b9adb8c9e7eb26e2a91169bd2b1f2e7e6df355925ef1f509fa66f3d8783a8d3ffa6da5c0422d8200586131706d0670ab746a3d1788b7f2fdc8ee22325b3b8565631da5497e5400c0051d687cf7a2d448bb4686d1075c7fce690a9e357652bf75e3192394b6eaf3a52de229b91c8531628192cc9038f7c236584a68895e4c8b555f3851e487a44f5e44751a7d9802e81d3c16e7fae02db8551a7ece00a2d6b1dc2d1e1ee74c5e7ee7d40f50d863d743e2815005b8df2a953ffb33b4ed449c345a2b1c9158a7058f8651c6204ac122b4e679821ecfcbd26ccb757a564e73cac65b946698e9d5b5ecbe7974936463d6f32337048e4ea9332ae3da7e8cfb1cdc42f3960a105c170e921db8605540261eb0b4af980ef5bdbe278d512262c1b962d0b6d0b58e297176f4b6fa554357bf6fcb6a26c542ebf9ab5c3d72cb2cc83ca92a94dee53cb073c825c014cbedcc98f7f67b71968c7c65031824ba0a59299813c9f3af4a58f4eb91ea4d6db4957cd5460cf9110a3cf55269626b90dc389e79af63a772300a2a17998c0ea6515416910e10e66213e3733db93b0d3b42bdead8970a64e437b4d7e5ecf3bf80f0856cdece736b96e9e74c8da1ae6e4cab590308c7369ba88d7cc90af791799c54e86e6221937f0520d73702bf2497fa918f83e2dab59122dfd46c466aec7dcbd218b93dca7ade7f82407cfc115f6c50c7cc5f5b19d1075b273833a33cb7d538abc39ed74492cfbcf14423e21a38f235b10cba2981bf8807ed363e81618516eaca84763cc97708e94b7dfa0095438b844c33a66df09e8c7f2f6102a7245cfd4185f5bd0cbb6aed89311fa74325ee7068f5667874f030a0193a5074679bf5b13613c77438b69237f6f4ecb7e6e09bd4a4519d1da762760756c6ca8f12d479baccd25c95a4fa5ae801af4792e20a8744fcc883af5216637404175d51d74e89402a93cfa59dbcdfc5bb7b18bc3455bb6cca1f25fbbf9e345684ba7e9e278156dc50765475984a29b83e652da5c0cd2df9b3f4ee36baed86f2a767155eeb521d691d051f1796daf7e1b80acab48a0ecff6ec89d2cb8fff96a7fc8e799cdb6af9237bb19020369efc526750e0076e486ca318ed89183b1b9ebdec5e59eb3971908ac8660bcdecee68391a16bcf200ee2d0a813109084103151b7f822553bfed53bcf017b0a77d5113c5910d7e1a45c208276bde8112895faef0e7999d36a5d533a6d0ce458c8735b4e03818301e328f2956e398e570e7197d72ed851e5e3eeb979629e7a94c7d72dcaccca9b2c42a7f11ec85f99a993ecf8f39cd4e5fcb6b07daac00da952c974881e51a9083c264ff63335a73cd57c957b08f00047ff45e1ea319216f8c0b31cc875550b1bfd10799ece7b88904de24fbe19bf8388f354f4cdbd44b081b7f34dbd3e9169aea4318166f48bbcafff7be914fec296cd2b0a18dce50e761e6b199f35b3d91d3caf73e89d945cec4c4a8e77d3aa4efd419eafeffb20907f15beb49ce9aa3eeb3856caa5e098b2c47f9eea8927f8b08ee82f36ced6be8dca9fa46c2cbd184adbfff11650f49b474cc770bb15e686efcd9312146fda730c33f6d68571c1f6be22bcd7f40dec77957ed786f0e46cdbcdd6e46b17fc7960411781f224a6e1266be6b7f2ef372772be26d9e074d0c0f4bdc3dac59e8776c63727ba69744a9ad086adce592e1497833a167431a1cd7e8ab1f7b04eb5e6ab0a95711f7f61e5b8fb773eccc66d4f9f3476abe7d336db7c3ee1c2b40d2b57144a9ba152eb9c87fd3f34b3fdb714fc691c8acdeb76d85a85fd7f073ecb191916689ec7b708db49e66fb57422917165cea98701d6da64fce59dfe81061f288955629bc134a5ce31125690a0d89eab81ce9760de62816d8c0c1420af41270beb7b716903b6f80c9a0843785d3a30d023ce45872af658a366963ce13174cda8c6e22c56614fcbdaabda0dfbfdcd09f69b390b02e5c579883f5d9fbba4c16f6f0e1699fdf63bb655d767fd7d38a6057afacc227452a7050255f8991e8e3bf2f0c472f774393050b6850d1a0494a47e22bf0aed832038e3ff6f39a94a208138b6824f058f1e6e3da4fd1c810b34f89377a77b194423c92ef0f8bce7d3c924afb527c802d3f140aeab63a549087deff6b41c76dcaa344ae6d8947a9a131ab0b36791a72929331fb5ea6178d6a68843651a0f4d4b0fda9d349e5651d770fd7367735b9761bf80c189f62d723aa91a7e1698c757d1eb2c0f16f48c4bd2da19942c92783e1248e29556ce2acb9e7dce5472a971e0062e190331e22098cad946884449ac08dcbca5950ff7d819705a1ee1e8b5455a3f19a2abdd42ad55280b3d9b7cf9f2bcc98b18a4791671ea9b8af4fa8c1450a7c85d7c94263f7dd0178c6668dcd450b959ec13f61432bf6e42741e805243e560ba443caaec659d0cfce798a6b8edfc3316207af6be55c065f8cc06f87546a3f9e58367a55f2211d9e958f09f108ff108bc31c515edd4d21e28ce8bbb13e6dc9a8628acd2b47f6b57630ce2428d7e2ae2ad04649ebe3072640148e274dec8ff14e1409e65c18369eb2acd56d7f94bc61ae2bc2f5afe195752c9153cc3e1b612900e0ca653f764736b54fd5d27a96ead12f3723e17ab9ef2cc7f85d7d0a829fc95c9e033586eb153274ba5bc9a6d8cbfda7fcee622de7ac88f4e3efcd8faaa185590dd9280fa0cdd7618f1603d09710ba8f5014d47790f5504e6c9e4dc47fec7891ca8ed99110623860b4bcc1c067790c210cc1475a1c047c04875c6973800a2964083e36b997bc9fc4f73e9eb28182511b61c9307849840ab08fab4a29d54270835fce6f37efdb260219d8e7567835c3cf7dbbf1dfb37890e5722fef51a0b5b137c0ed8cb1742cc6b3cb60a7eacd859d40fbf59fd883a8d855cf7b161644d881866ce3c479d2d6a1caf21c91a2b601804a400afdc0abe9febf75ec6ea4fa0c6e05e05855d4af6d63f26933aeb78097f1563ff4c55ff5b0abc73d1ec54dbc6e48abc27bd24ef40188de09a368b3739d025bffcffe943d02929cdd4e921b57dd90aea5a6b1ac135cc9fff4bb2644b55417914109e1c76277f181f337077d6d1c9dd942110643c065a27deff5e106fc03ddad1fe3e44673bd2c103da9f3ec5785897f12acf4557c158129a8ffd0be0e4097e52e619f263729439566d54d2a06e72652a59c7714a32ee69b64696319b8f10f1934da0600af0e84eeb16971a8ab72a259a7470e55d7807a19abd8adbc96bc4b5009005edfdd6b10ee05b375cc1923814184b6a456326468a6df49e694f61809f39e0c4fa9d5e9363e8b51a3f60cf5afd880ca50efe1b988843e7fed67a40a88311231a73321d14ff0eb14f4ed255a4053e10d101d56ab26dc956137ad206a9928e20c67c5562a51ad5c20e1454364eb2655d62c06cadbc54f724abe26d7b97bcc619b46934188795b53c0e941b5ee55086bb639680e992d3157c5a1ae683e3bc50d238bc022fd2daadb6d0063a6b5506ba0557adf5bb631e67c0740dcb8452d765d74caec02051a6519667f7b6f83a995ce56613ff40e8ad2bb6ab5e44ac16676678a04180a036d4339a22dd2f62182c9981e6b2662d77f399b7329e921a7a3bf1aee911a5a53850166154c3db6c010539e4fc9f68c6d20082ca465f74e7a4ef30ab53eedda3d14e8421973bbe7669b69b1fd443f84fbeb400762b82c2bd0b51d8472aa0468829efab41dd18e1d6542592eaef32b6fe8951b61830fb262b29b3c5970d5a3b63f00f657ab878c75a1e0f60cb6864aac07e543c9fdc39756c3bf3b2153a6c7f0b98b3b2bd0ffa83345bf5c14c76ff5f0b58ad28f027879d9a73494fd31162f18ba606a401d136e1ca0d9fe40df728fc1abcb374e34208400a911503b9ee9b7d1fe431f250e12a8aa48e3c32d0f20ee38cc051f103fab24df7724fa9fb01dd3a7e5907e09b2e812f0d89aa8976dcdd48dac714d491ab919e6d3dea2bd7c54eee39ef7bcd39f6f716eab16b65c1f441d2fdb7d3df146c34a8e4eb54eb52d76011fd00286ed79ce7cde74ccf48f81c9e20cc0d88951a5332cbce68fc043c7fde34e09ea9ca9791b53aede2a6c5482d87194d2ac4ac351da783a58b54b597d7ed09670d69aced75f18d5f4041ff2fdd718082ed5d0403e407da47f958f025c605c23d23670a56de3d08d069c4ff572439881894db9bb193893b2bb76d19dcc0a81c740a665f773efadc419fb15a21d4e6cda4f9705db87ca33d8a5d9cc0aa894c8ba135927583f8963f8ebcf672657a5a483a73db569e334fa622615556e63a26276b22758d009715103347f80a0d9182c7cd516e843bb6140413cad97dc232de0c1bb575cba497e5fcf373f7ef8285bb095157563b4246c17c69c21742b26fb46123a40869470c222de27d47395266d6a1f9aa2bdf1936e194e44fb247e9399c3e57a04022b7f78295e3fb017eebeee60cabd43861fd3623d0b428d355ae59d22c529e402501f8f81385abc439b2363fb3db679034f34dead9314e70ed531ebb1452d0717f9b3fa27e43fe9577c469be5580f223de35d8a1fa1421410c29f86ac1b2073f1d78ca755f8f504a57090f76a7a5c6c17f8f73642506f56549677b0f49bdb35eea153143fd5c9abd67290e330c0af6713252bc6e037b826f0cadd2fa66e0ee26996599b683021722a2cce59a327f194a66b58735af847c97cb1b6f830d6dd3f670567197df12b2aee674ea2ff9c9ce29590dadd8f08d0876b1dd1e03daee8249a71d6cd1660ba6f4e734c053412174950c64fa5a1a9f3126423b30a055fa018bc70e9a66ee1d8ed82924c68177066b74d1ce4995efd2ce26d94339dc1ffb26a17157f44d0e821f8e9549ef2cd0e4257d559135a1ddfed997171012483db304d567d1db1ad12500966809f13e8721da668bd2cd0a70e64002d1f7a29d9ff42abdbb6feb128edcbbe68a39b112b8eb76b4743a1f4d1bebe406e22ff618ddb40f73aef48101c36547f49526d9fc92361bb762cf1d0b8bf7b48ae32d2ed170307100c71090c53e6c3f81c730e65b13fabb89d72cefd4e13b6f31ff6275020e3de678c2a4af64774f35d6b89f023d2706dd30afecf9af213cae735970c175d12e5c43ac51a3ed66ad847bdc2c38663d4ecad8e8da6c12f3c761fcdb215be7bf63970296a47a0b8d62983c33d4bdf76ea66886c77d239f79b8f70c9a5c02d39c2d7b371969b4458963c9bda95eff432e775262e3b81871b6d199614105fd514f74ec8fc561b463835a4513e97de6b441e7dfe4ee9db26fff20d8487fa1a630952762fd1d825562ee6ce8beedc0ddaf49732c8cbaf192bbc6b6b01095e30bde64562c9cb56d3232d2c6b01db9196faaf445444367fbdf5a3312d63547b3e2ed4e63a79b52a2719b4f898c2b4e4ceb845263534f36a0b28a", 0x1000}, {&(0x7f0000002b40)="4babbf9aa80d1a39d801a1a14e633285c73a0ed91da8d5fe66083509d56a6cb57e3e34af4cfbdb65c846e030f60bbcfa159c68a3ce7fc89f8e9669c0a768e91c9029af279e462b74633e8190f0150bea03c9c0bc8e67d8aefdb71ed92a8f0afa6357a357cb65419dd9dc391402b12c67dd80858cfc9c6b56d444c741a5d392d97b9bc762d931b1c0f97f50897f7c5dc5819602583f72c40af8f3bfbbce03b581884e1a1e3bae4373a6f38903a08d", 0xae}, {&(0x7f0000002c00)='lF', 0x2}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="aafc86b2ed963036266f22209152e4e1c002bdcd0d5192fa18b32545b6b4495140ccab5bbea7f322364d674edd6e6e76d0073b", 0x33}], 0x5, &(0x7f0000003d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x18}, 0x4890) 13.419687035s ago: executing program 1 (id=2285): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016", 0x33}], 0x1}, 0x4000040) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x7, 0x0, &(0x7f0000000140)="e9020400000000", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f0000000300)=r5}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x45, &(0x7f0000000040)=r8, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, r5, 0x3a, 0x2000, 0x0, @value=r8}, 0x20) 11.581373596s ago: executing program 1 (id=2288): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 11.171143045s ago: executing program 1 (id=2293): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r3, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x5, 0x8}]}, @enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x5, 0xfffffff7, 0x9}]}]}, {0x0, [0x2e]}}, &(0x7f0000000800)=""/171, 0x57, 0xab, 0x0, 0x3}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@fwd={0x1}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x7f}}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x5}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x30, 0x61]}}, &(0x7f0000000440)=""/9, 0x75, 0x9}, 0xfffffffffffffdc0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x8080, &(0x7f0000000700)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000008208500000073000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe, 0x57, &(0x7f0000000380)="b9fff548600d698ceb5819570163", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000700000000000000ffffff7f95000000000000009500000000000000950000000000000040fc14bacf1ce0a325996a37ed09abf959b2faca41d7eb35f3d34966157e82e03195efd9930a5b3f28e70226ebb3a211f89220655dbe89b942dee29b6fb6d2c972809fc9d70a84c295323e0e0a89b08b9664fc48fc92ecdbf93de35bcc1efd06c5364794bab548d35df5b21ea5bb2b043040bb842e6b8c31d38ba6b1fafa181bae183021353c9ce191abfa5efbe3487d2d2df2856b68074ba75e1a0d44a5b4480426abfca7589a0e7cdc5af41c2dbace39ab83bb77b0a1dc09c40284e912c7c85e68ce4ddd5bed00"], &(0x7f0000000140)='GPL\x00', 0x7, 0x51, &(0x7f0000000180)=""/81, 0x41100, 0x48, '\x00', 0x0, @tracing=0x19, r6, 0x8, &(0x7f00000004c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x8, 0x1ff, 0x1}, 0x10, r7, r8, 0x1, &(0x7f0000000580)=[r9], &(0x7f00000005c0)=[{0x4, 0x3, 0x3, 0x3}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x100, 0x0, 0x0, 0x40f00, 0x54, '\x00', r4, @fallback=0x33, r5, 0x8, &(0x7f0000000900)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xd, 0x3, 0x10000}, 0x10, r7, r2, 0x0, &(0x7f00000009c0)=[r3, r3, r3, r3, r3], 0x0, 0x10, 0x7}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 10.311943807s ago: executing program 1 (id=2297): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0xfffffffa, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) 10.135644829s ago: executing program 1 (id=2300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000004850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000c00, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x100, 0x0, 0x3f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018f90000000000000c0000000c00000002000000fcffffff00000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r6, 0x110, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x1b, &(0x7f0000000100), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(r10, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast1, 0x4}, 0x4, 0x0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 3.365936601s ago: executing program 3 (id=2324): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3, &(0x7f0000003ac0), 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41) 3.111379379s ago: executing program 0 (id=2325): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd24b07bf0dfac217e4089100", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e9", 0x17}], 0x2}, 0x7c6be06056082952) 2.858037437s ago: executing program 0 (id=2326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000200000000000000000000de0f00719bfcff04f8ffff1701000020786c250000000000200900000008ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030001000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000200000000000000000000de0f00719bfcff04f8ffff1701000020786c250000000000200900000008ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030001000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000010000146cf44300", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x8841) (async) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000010000146cf44300", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x8841) recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x10000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000000580)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @sock_ops=0x3}, 0x94) 2.665117241s ago: executing program 3 (id=2327): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x3, 0x0, 0x0, 0x0, 0x5, 0x60470, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x4, @perf_config_ext={0x86, 0x7}, 0x103c20, 0x1, 0xffffffff, 0x0, 0xf, 0x0, 0x3f}, 0xffffffffffffffff, 0x1, r5, 0x2) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES8], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8940, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x0, 0x64, 0x6b, &(0x7f0000000240)="c212e33a00f1d520f7294475494e6d6566b81ef306d85a10262471787feedd4ad1bc356b47424bafb40931ee99bb3a3b406aa6e2673d44dd002caa3b173328e6e03301d157108133c1cc899a8e31e5492eef53f1ae5b1be4fc4ec8fd376ad65a09873ab9", &(0x7f0000000440)=""/107, 0x94, 0x0, 0x85, 0x71, &(0x7f0000000500)="d33500ef6f0c2aed2046fa479e5bb9bb8b52b0aeac75851358831b8fe80a4907c9e88df80009c5c7c5bb5744cdf5c350001de225befd90e58ecb4b2c7f65521b0551e38fba86d5e4389ec7c96e3051bfb5db3cce417d03a07a0151800ad09f7f5ff5ff2781bbe0949ae9c2d4988f641bcd9fbea3e3d9269b05071b7e25a651f0a8729b204c", &(0x7f0000000680)="93c75a7121f7d10900d891eea28186465726654e6084e21224aa977729ff4c4db6ccbaf0189d574a62fdf35d74d2ef6575b7c7dba1f909d714b28fc92746041b9044815b83b3fb59648a5bc530edbce694bec38a65ab10d8bd9b04c61708ffc93bc8cc4f184c377efd9674c255edf17b79", 0x5, 0x0, 0x3}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 2.11088297s ago: executing program 3 (id=2328): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000c3f040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$kcm(0x23, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000940)={r3, r0}) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffdd4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x18088, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x9, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) mkdir(0x0, 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r4, 0xfffffff8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x8, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) (async) close(r0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x800, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000080000000000000009000000186400000d0000000000000005000000186700000a00000000000000fbffffff18000000030000000000000008000000184500000600000000000000000000efe50de8180062b30600fcffffff9500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0x54, &(0x7f00000003c0)=""/84, 0x41000, 0x0, '\x00', r10, 0x25, r0, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x9, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r1], 0x0, 0x10, 0x8}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000a80)=ANY=[@ANYRES64=r7], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.823774711s ago: executing program 0 (id=2329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000011c0)={0x0, 0xffffffffffffff9f, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000000000000000000000004000030000000000000008400000001"], 0x50}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000300)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x2, &(0x7f0000000000)=r8, 0x8) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f001100000000010000000000000600000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) 1.808479742s ago: executing program 3 (id=2330): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) 1.744083946s ago: executing program 2 (id=2331): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000001300)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0x1, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001480)=@generic={&(0x7f0000001440)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000014c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x18, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xdda}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xb}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x1, 0x3, 0x7, 0x3661, 0x2}, @alu={0x7, 0x1, 0x0, 0x0, 0x6, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xc, 0x1000, &(0x7f00000002c0)=""/4096, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x2, 0x0, 0x80000000, 0x8000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001540)=[r2, r3, 0x1, r4, r5], &(0x7f0000001580)=[{0x2, 0x4, 0xe, 0x5}, {0x1, 0x2, 0xa, 0x5}, {0x3, 0x2, 0x2, 0x1e}, {0x2, 0x4, 0xb, 0x6}, {0x1, 0x4, 0xf, 0x6}, {0x5, 0x4, 0xc, 0x4}, {0x0, 0x4, 0x10, 0x7}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0xf}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010000400", 0x33fe0}], 0x1}, 0x0) 1.563756469s ago: executing program 0 (id=2332): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x16, 0x0, 0x0, 0x3}]}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getpid() r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000014006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0xfffffdef) socketpair(0xf, 0x1, 0x1, &(0x7f0000000280)) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) 1.562531649s ago: executing program 3 (id=2333): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0xfffffffffffffe47}, 0x4000841) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000063112100000000008510000002000000850000000500000095000000000000009500a50500000000ab46e77dfa08d5a5ed5007e537903330f1afe48b17a6845b244c02a146f56ddd3f9e75c53f23a73b9cf5236b08c5d8b43438b69cf7597730c6e6e853123566668dba7b212b32f7597beeae88aa942d4a2bd732d4d1"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.323441746s ago: executing program 2 (id=2334): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001f10000850000001500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff070000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000e40)="fbd2b9ed29d8974a6ce75f08916ab26d9e164e31", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 981.77381ms ago: executing program 2 (id=2335): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x200, 0x0, 0x6, 0x22810, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3}, 0x50) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110900000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 515.831204ms ago: executing program 2 (id=2336): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe9f, 0x0, 0x0, 0x0, 0x65800000}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x800}, @ldst={0x2, 0x1, 0x6, 0x5, 0x9, 0x4, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x5, 0x1, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001600)=[0xffffffffffffffff], &(0x7f0000001640)=[{0x0, 0x4, 0x4, 0x4}, {0x2, 0x1, 0xf, 0x6}, {0x1, 0x3, 0xe, 0x3}, {0x3, 0x1, 0x7, 0x3}, {0x1, 0x3, 0x4, 0x9}, {0x2, 0x4, 0x2, 0x5}], 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a00)={r1, 0x0, 0x9a, 0x1000, &(0x7f0000001840)="aab73e16200dd1c770f7620ecaaff2950b617563730844df7065e8813c112db85c1851911812ed4558bc6f733ef492022cc6f3a956951775f5a387b102675576d3e6e669bc005d6e17949eb73e28d20af6ec38e30589b44a8e6128c1bd0c4fa0aafe43d8668c289750019c355ad5b35a9935accbecf78d0ec7d5bfd5614805f86ea31f00b5178f51e7ba3103709d2ac7d7bd1667c46449e375ca", &(0x7f0000001900)=""/4096, 0x7, 0x0, 0x1, 0x5c, &(0x7f0000002900)='<', &(0x7f0000002940)="2e2499e89d6dacdac2ad6b748508f1f49d4b9da450c51b729d14b97e4acccad9a1ad7f7a4e21085f940fee3117284db6ef6d1439b33e36e99971d1ba341322e314ce005beb8b6b876092d30952d504729427651d4d4f2df6e79602ac", 0x2, 0x0, 0xfffffcbe}, 0x50) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x4100, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) (async, rerun: 32) close(0xffffffffffffffff) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) (async) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000000)=r3, 0x12) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 452.975228ms ago: executing program 0 (id=2337): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) r2 = openat$cgroup_ro(r0, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x4, 0x7, 0x6, 0x800, r2, 0xfffffffe, '\x00', r5, r6, 0x3, 0x0, 0x0, 0x6}, 0x50) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4cf9e5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e428ceddaacf723f6d6b6727a114dd9c68ddf2eb1c3af20dad0f668c726a0be7063096905db919c513a3ebe95f8", 0xf6}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) 400.064402ms ago: executing program 3 (id=2338): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r2, &(0x7f0000000300)="3cba33ce5647a0e4c2008d0838cca7d37030f7be8d00a4bda7e49f1e2c19f7dcef5ec26e7d19df24b51cad7b8ace926d6aac81715594e708c93dcc5df9255b5c23319fd1a6b77fb1d3d717feab1dd903e52872465357da05bffb8d7013abf78514d7b8cc81d1f1e4d6e50ad40505c50e040adcecfea0fb6c599be49193d68ebc1d326340362f5e2a43035966e223d23c72ac5436c6401f47b969e282856c3fb6e94088d61b8a41cf4b86b00051a1216978c6741e0ebc844be0fcf9221d33ea43850c12b4326ca95f236f41bdf76bcc18c4f08fd9a33e585e9eff56c1e30bae5f87a1e9b6a4373600c9971d0ef4c89afe"}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56bd86acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd6"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r6, r7, 0x2f, 0x2028, 0x4, @void, @void, @value=0xffffffffffffffff}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000240)='n', 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e2b, @multicast2}, 0x10, &(0x7f0000000380), 0x2, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e880b8b, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x5, 0x0, 0xc}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x7f, 0x1, 0xb833, 0x545, r4, 0x3, '\x00', r11, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r12, r5, 0x2d, 0x0, 0x0, @void, @value=r3}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r12, r5, 0x2d, 0x0, 0x0, @void, @value=r3}, 0x20) 215.448705ms ago: executing program 2 (id=2339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000780)="4a09ecc174cc05e3881fd996f51b21a18e5c08158631efe5957f99be6ed94151ca365afc104b1045c3c5299687dc0d71098fd6912c1ee9c4bf6a504fa22244acc0898f7f033c6af369787b0871e304bd289a472a2f2521cbbab6919ed206a313c5fb14673d29fa3dd5a03e8ab40765b543872919f42fe5e620ad640dfa7d55e6d442c817c7f377aee0170414abeca8496fa60cf58b1b64373497c0e4516fe677136d90d4ccf8709613b25155f7e18b67e9e50b4e2fdf50983ea3bca12bb082758f0e2a2fdceb84089ee15764f55988da9cf8511f2bb2ec3b9e3d7d71ddbd3bb4f1b37d19a3b39567e27f9c9071d700"/254, &(0x7f0000000100)=""/59, 0x4}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x2e) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f0000000c40)=r1, 0x4) (async) socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8954, &(0x7f0000000040)) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000880)=""/133, 0x85}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/133, 0x85}, {&(0x7f0000002c00)=""/165, 0xa5}, {&(0x7f0000002cc0)=""/217, 0xd9}], 0x5, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}, 0x24) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x30, 0x0, 0x20000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500001208000000000000000000000300000000040000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNGETFILTER(r8, 0x801054db, &(0x7f0000000180)) (async) socket$kcm(0xa, 0x3, 0x73) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 213.490685ms ago: executing program 0 (id=2340): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="400e020023000b02d25a806f020094f90724fcdebbd67b82c137153e3702480180005f966035fb9ff77733f8196011ffeaf01700d1bd00000000001000", 0x3d}], 0x1}, 0x40080) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="400e020023000b02d25a806f020094f90724fcdebbd67b82c137153e3702480180005f966035fb9ff77733f8196011ffeaf01700d1bd00000000001000", 0x3d}], 0x1}, 0x40080) ioctl$SIOCSIFHWADDR(r0, 0x8917, &(0x7f0000000280)={'ip6_vti0\x00', @link_local}) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r4) (async) close(r4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005300000095dbd0ff7fa57b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005300000095dbd0ff7fa57b0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x900000, 0x0, 0x0, 0x1, 0x0, 0x40}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6000, 0x4, @perf_bp={0x0, 0x3}, 0x29, 0x0, 0x0, 0x6, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x19) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x20000884) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x20000884) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000000040000000400000000", @ANYRES32=0x0, @ANYRES32], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0600000004000000040000000400000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x8000000, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000006900000095", @ANYRES64=r9], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x15, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xad1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x33}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe3be}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[r8, 0xffffffffffffffff, r9], &(0x7f00000007c0)=[{0x5, 0x1, 0x6, 0xa}, {0x3, 0x2, 0x3, 0x5}, {0x0, 0x4, 0x8, 0x8}, {0x3, 0x2, 0x3, 0x5}, {0x2, 0x3, 0x5, 0xd}, {0x2, 0x2, 0x8, 0x1}, {0x4, 0x1, 0x8, 0x8}], 0x10, 0x10001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x7f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00', 0xa, 0x16, &(0x7f0000000300)=""/22, 0x41000, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x1, 0x601, 0x7f0}, 0x10, 0x0, r2, 0x3, &(0x7f0000000580)=[r0, r0, r10], &(0x7f0000000740)=[{0x1, 0x1, 0xa, 0xa}, {0x2, 0x4, 0xe, 0x7}, {0x1, 0x2, 0xc}], 0x10, 0xff}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.1.990'. [ 297.145752][ T9526] netlink: 830 bytes leftover after parsing attributes in process `syz.0.994'. [ 297.287955][ T9528] team_slave_0: left promiscuous mode [ 297.335622][ T9515] netlink: 'syz.3.991': attribute type 10 has an invalid length. [ 297.398951][ T9528] team_slave_0: left allmulticast mode [ 297.555406][ T9528] team0: Port device team_slave_0 removed [ 297.583851][ T9528] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 298.017338][ T9536] netlink: 'syz.2.997': attribute type 39 has an invalid length. [ 298.367279][ T9551] netlink: 'syz.0.1000': attribute type 9 has an invalid length. [ 298.400010][ T9551] __nla_validate_parse: 3 callbacks suppressed [ 298.400026][ T9551] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1000'. [ 298.902159][ T9549] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 299.503785][ T9561] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1003'. [ 299.572975][ T9547] netlink: 'syz.0.1000': attribute type 9 has an invalid length. [ 299.580910][ T9547] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1000'. [ 299.742519][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.793558][ T9563] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1004'. [ 299.833404][ T9563] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1004'. [ 299.871525][ T9563] bridge_slave_1: default FDB implementation only supports local addresses [ 299.896813][ T9566] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1004'. [ 299.910348][ T9565] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1006'. [ 300.082448][ T9572] netlink: 'syz.1.1005': attribute type 3 has an invalid length. [ 300.136969][ T9572] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1005'. [ 300.175553][ T9576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1005'. [ 300.255204][ T9580] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1009'. [ 300.909449][ T9587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.233592][ T9608] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 305.192707][ T9644] __nla_validate_parse: 9 callbacks suppressed [ 305.192728][ T9644] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1028'. [ 305.335597][ T9640] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 305.374339][ T9640] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 305.540719][ T9652] netlink: 'syz.1.1030': attribute type 39 has an invalid length. [ 305.569706][ T9650] netlink: 'syz.1.1030': attribute type 39 has an invalid length. [ 305.771714][ T9661] netlink: 'syz.0.1032': attribute type 10 has an invalid length. [ 305.889730][ T9661] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.941747][ T9661] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.971571][ T9661] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.011513][ T9661] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.164104][ T9661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.211752][ T9661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.242626][ T9661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.258351][ T9661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.301539][ T9661] team0: Port device geneve1 added [ 306.893401][ T9674] netlink: 'syz.0.1036': attribute type 39 has an invalid length. [ 307.656126][ T9680] netlink: 'syz.2.1037': attribute type 29 has an invalid length. [ 307.923675][ T9680] netlink: 'syz.2.1037': attribute type 29 has an invalid length. [ 308.154473][ T9687] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1040'. [ 308.590864][ T9692] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1041'. [ 311.423649][ T9756] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1051'. [ 312.367079][ T9774] netlink: 'syz.1.1056': attribute type 33 has an invalid length. [ 312.382095][ T9774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1056'. [ 313.020505][ T9782] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1053'. [ 313.520517][ T9797] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1059'. [ 313.899920][ T9797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.004286][ T9797] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 314.134923][ T9797] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 314.173388][ T9797] bridge0: port 3(team0) entered disabled state [ 314.182277][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.191518][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.279872][ T9797] bond0 (unregistering): Released all slaves [ 314.436423][ T9814] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1064'. [ 314.621564][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 314.938978][ T9827] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 314.967672][ T9827] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1068'. [ 315.245459][ T9811] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1062'. [ 315.674821][ T9840] netlink: 'syz.2.1071': attribute type 2 has an invalid length. [ 315.721749][ T9840] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1071'. [ 315.799904][ T9840] netlink: 'syz.2.1071': attribute type 21 has an invalid length. [ 315.831698][ T9840] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.994396][ T9842] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1071'. [ 316.052070][ T9846] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 316.081536][ T9846] netlink: 'syz.1.1073': attribute type 8 has an invalid length. [ 316.120106][ T9846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1073'. [ 316.444041][ T9856] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1076'. [ 316.981916][ T9872] bridge0: port 3(veth0_to_bridge) entered blocking state [ 317.006906][ T9872] bridge0: port 3(veth0_to_bridge) entered disabled state [ 317.022127][ T9872] veth0_to_bridge: entered allmulticast mode [ 317.047996][ T9872] veth0_to_bridge: entered promiscuous mode [ 317.061064][ T9872] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.078072][ T9872] bridge0: port 3(veth0_to_bridge) entered blocking state [ 317.085982][ T9872] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 317.671687][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.678575][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.579257][ T9899] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1088'. [ 318.818459][ T9895] netlink: 'syz.0.1087': attribute type 8 has an invalid length. [ 318.854825][ T9895] netlink: 'syz.0.1087': attribute type 9 has an invalid length. [ 318.881669][ T9895] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 318.977964][ T9895] netlink: 'syz.0.1087': attribute type 11 has an invalid length. [ 319.023327][ T9895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1087'. [ 319.085009][ T9907] netlink: 'syz.2.1090': attribute type 10 has an invalid length. [ 319.140397][ T9907] team0: Device hsr_slave_0 failed to register rx_handler [ 319.306018][ T9911] syzkaller0: entered promiscuous mode [ 319.315937][ T9911] syzkaller0: entered allmulticast mode [ 319.680352][ T9919] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1097'. [ 320.045020][ T9934] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1097'. [ 320.430206][ T9937] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1099'. [ 320.806304][ T9940] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.1100'. [ 320.887437][ T9940] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1100'. [ 321.998964][ T9961] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 322.022103][ T9973] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1109'. [ 322.033647][ T9961] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1105'. [ 323.619412][ T9978] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1111'. [ 325.486446][T10004] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1119'. [ 325.721356][T10005] netlink: 'syz.2.1120': attribute type 10 has an invalid length. [ 326.114464][T10005] team0: Port device dummy0 added [ 326.127058][T10016] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1123'. [ 326.174691][T10012] netlink: 'syz.0.1121': attribute type 21 has an invalid length. [ 326.183450][T10005] syz.2.1120 (10005) used greatest stack depth: 17896 bytes left [ 326.213701][T10012] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1121'. [ 326.277753][T10016] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1123'. [ 326.359847][T10020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1123'. [ 328.184732][T10039] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1127'. [ 329.309378][T10054] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1132'. [ 330.828415][T10069] netlink: 'syz.2.1136': attribute type 13 has an invalid length. [ 330.840879][T10069] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1136'. [ 330.857970][T10061] delete_channel: no stack [ 330.959884][T10069] erspan0: refused to change device tx_queue_len [ 330.997025][T10069] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 331.051554][T10072] netlink: 'syz.3.1134': attribute type 21 has an invalid length. [ 331.059547][T10072] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1134'. [ 331.092553][T10075] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 331.742453][ T9165] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 332.104130][T10089] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1141'. [ 332.852566][T10101] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1144'. [ 332.878596][T10099] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1145'. [ 333.027649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.040364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.052965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 333.067111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.079865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.093046][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 333.106860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.119818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 333.122146][T10099] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 335.604759][T10107] netlink: 'syz.2.1146': attribute type 5 has an invalid length. [ 335.632764][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.712416][T10099] netlink: 'syz.1.1145': attribute type 10 has an invalid length. [ 336.001683][ C1] net_ratelimit: 3615 callbacks suppressed [ 336.001702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.020338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 336.033902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.046545][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.059649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 336.073360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.086420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.099276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 336.113028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.126001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.980563][T10129] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1151'. [ 338.922136][T10144] pimreg: tun_chr_ioctl cmd 1074025677 [ 338.959585][T10144] pimreg: linktype set to 819 [ 338.987086][T10147] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1156'. [ 340.224883][T10169] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 340.248437][T10169] team0: Device hsr_slave_0 failed to register rx_handler [ 340.406843][T10158] syzkaller0: entered promiscuous mode [ 340.417754][T10158] syzkaller0: entered allmulticast mode [ 341.044574][ C1] net_ratelimit: 5281 callbacks suppressed [ 341.044589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.071018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.089678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.111499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 341.146828][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.172689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.202536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.222896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 341.269268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.303818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.719339][T10209] netlink: 'syz.2.1171': attribute type 3 has an invalid length. [ 345.727714][T10209] netlink: 'syz.2.1171': attribute type 6 has an invalid length. [ 345.747363][T10209] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1171'. [ 346.051733][ C1] net_ratelimit: 4438 callbacks suppressed [ 346.051751][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.070340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.082948][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.095634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 346.109079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.121855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.134526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.147295][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 346.161424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.174077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.282177][T10195] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1167'. [ 350.883405][T10215] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1172'. [ 350.925979][T10215] veth0_to_bond: entered promiscuous mode [ 351.062008][ C1] net_ratelimit: 8607 callbacks suppressed [ 351.062738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.097813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.123429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 351.171461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.191627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.212607][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.243874][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 351.284944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.300488][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.325375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.485816][T10220] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1174'. [ 353.036569][T10245] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1182'. [ 353.970704][T10262] netlink: 'syz.3.1185': attribute type 10 has an invalid length. [ 354.031521][T10262] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 354.324783][T10271] delete_channel: no stack [ 354.362173][T10271] delete_channel: no stack [ 354.517132][T10264] can: request_module (can-proto-0) failed. [ 354.700974][T10276] netlink: 'syz.0.1190': attribute type 41 has an invalid length. [ 354.744549][T10276] netlink: 'syz.0.1190': attribute type 41 has an invalid length. [ 356.074750][ C1] net_ratelimit: 4705 callbacks suppressed [ 356.074803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.100681][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.122690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.145185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 356.211335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.238873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.262795][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.284631][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 356.338186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.365961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.309394][T10299] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1196'. [ 360.060958][T10333] netlink: 'syz.0.1204': attribute type 2 has an invalid length. [ 361.081673][ C1] net_ratelimit: 4080 callbacks suppressed [ 361.081695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.101522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 361.115344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.128167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.140960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.154476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 361.168307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.181133][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 361.193943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 361.206841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 361.609343][T10350] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.1210'. [ 366.092234][ C1] net_ratelimit: 7060 callbacks suppressed [ 366.092254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.110721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.123378][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.136162][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 366.150518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.163458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 366.176076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.189177][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 366.202810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.215370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.918515][T10378] veth1_to_bond: entered allmulticast mode [ 370.352110][T10405] raw_sendmsg: syz.1.1228 forgot to set AF_INET. Fix it! [ 370.622772][T10402] netlink: 'syz.3.1226': attribute type 4 has an invalid length. [ 370.631145][T10402] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1226'. [ 371.101565][ C1] net_ratelimit: 8577 callbacks suppressed [ 371.101584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 371.122268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.135383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.148579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.161974][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 371.176937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.190593][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 371.203841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.217034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 371.231698][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.083318][T10449] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1241'. [ 374.310333][T10449] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 374.799723][T10464] netlink: 'syz.1.1246': attribute type 3 has an invalid length. [ 374.834610][T10469] FAULT_INJECTION: forcing a failure. [ 374.834610][T10469] name failslab, interval 1, probability 0, space 0, times 0 [ 374.889630][T10464] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1246'. [ 374.939098][T10469] CPU: 0 PID: 10469 Comm: syz.3.1247 Not tainted syzkaller #0 [ 374.947444][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 374.957754][T10469] Call Trace: [ 374.961087][T10469] [ 374.964337][T10469] dump_stack_lvl+0x18c/0x250 [ 374.969271][T10469] ? show_regs_print_info+0x20/0x20 [ 374.974800][T10469] ? load_image+0x420/0x420 [ 374.979375][T10469] ? __might_sleep+0xe0/0xe0 [ 374.984039][T10469] ? __lock_acquire+0x7d40/0x7d40 [ 374.989140][T10469] should_fail_ex+0x39d/0x4d0 [ 374.994074][T10469] should_failslab+0x9/0x20 [ 374.999266][T10469] slab_pre_alloc_hook+0x59/0x310 [ 375.004898][T10469] ? __get_vm_area_node+0x125/0x370 [ 375.010615][T10469] __kmem_cache_alloc_node+0x53/0x250 [ 375.016336][T10469] ? __get_vm_area_node+0x125/0x370 [ 375.021695][T10469] kmalloc_node_trace+0x26/0xe0 [ 375.026621][T10469] __get_vm_area_node+0x125/0x370 [ 375.031818][T10469] __vmalloc_node_range+0x36e/0x1330 [ 375.037349][T10469] ? netlink_sendmsg+0x602/0xbf0 [ 375.042533][T10469] ? netlink_insert+0x109f/0x13a0 [ 375.047742][T10469] ? netlink_data_ready+0x10/0x10 [ 375.053108][T10469] ? free_vm_area+0x50/0x50 [ 375.057683][T10469] ? netlink_sendmsg+0x602/0xbf0 [ 375.062697][T10469] vmalloc+0x79/0x90 [ 375.066841][T10469] ? netlink_sendmsg+0x602/0xbf0 [ 375.071944][T10469] netlink_sendmsg+0x602/0xbf0 [ 375.077076][T10469] ? netlink_getsockopt+0x590/0x590 [ 375.082356][T10469] ? aa_sock_msg_perm+0x94/0x150 [ 375.087533][T10469] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 375.093075][T10469] ? security_socket_sendmsg+0x80/0xa0 [ 375.098687][T10469] sock_write_iter+0x2df/0x420 [ 375.103536][T10469] ? sock_read_iter+0x3e0/0x3e0 [ 375.108659][T10469] ? common_file_perm+0x198/0x1f0 [ 375.113965][T10469] vfs_write+0x46c/0x990 [ 375.118411][T10469] ? file_end_write+0x250/0x250 [ 375.123418][T10469] ? __fget_files+0x43d/0x4b0 [ 375.128167][T10469] ? __fdget_pos+0x1d8/0x330 [ 375.132920][T10469] ? ksys_write+0x75/0x260 [ 375.137700][T10469] ksys_write+0x150/0x260 [ 375.142224][T10469] ? __ia32_sys_read+0x90/0x90 [ 375.147157][T10469] ? lockdep_hardirqs_on+0x98/0x150 [ 375.152518][T10469] do_syscall_64+0x55/0xa0 [ 375.157087][T10469] ? clear_bhb_loop+0x40/0x90 [ 375.161908][T10469] ? clear_bhb_loop+0x40/0x90 [ 375.166914][T10469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.172878][T10469] RIP: 0033:0x7fdf0a59c819 [ 375.177398][T10469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.197766][T10469] RSP: 002b:00007fdf0b42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.206752][T10469] RAX: ffffffffffffffda RBX: 00007fdf0a815fa0 RCX: 00007fdf0a59c819 [ 375.214966][T10469] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 375.223171][T10469] RBP: 00007fdf0b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 375.231290][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.239705][T10469] R13: 00007fdf0a816038 R14: 00007fdf0a815fa0 R15: 00007ffe870053d8 [ 375.247858][T10469] [ 375.804464][T10475] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 375.835619][T10469] syz.3.1247: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 375.859591][T10475] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1249'. [ 375.918599][T10469] CPU: 0 PID: 10469 Comm: syz.3.1247 Not tainted syzkaller #0 [ 375.926510][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 375.937030][T10469] Call Trace: [ 375.940536][T10469] [ 375.943783][T10469] dump_stack_lvl+0x18c/0x250 [ 375.948627][T10469] ? show_regs_print_info+0x20/0x20 [ 375.953896][T10469] ? load_image+0x420/0x420 [ 375.958566][T10469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 375.965233][T10469] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 375.971888][T10469] warn_alloc+0x246/0x340 [ 375.976290][T10469] ? zone_watermark_ok_safe+0x230/0x230 [ 375.981998][T10469] ? __get_vm_area_node+0x356/0x370 [ 375.987288][T10469] __vmalloc_node_range+0x393/0x1330 [ 375.992826][T10469] ? netlink_insert+0x109f/0x13a0 [ 375.997936][T10469] ? netlink_data_ready+0x10/0x10 [ 376.003312][T10469] ? free_vm_area+0x50/0x50 [ 376.008072][T10469] ? netlink_sendmsg+0x602/0xbf0 [ 376.013079][T10469] vmalloc+0x79/0x90 [ 376.017217][T10469] ? netlink_sendmsg+0x602/0xbf0 [ 376.022403][T10469] netlink_sendmsg+0x602/0xbf0 [ 376.027250][T10469] ? netlink_getsockopt+0x590/0x590 [ 376.032690][T10469] ? aa_sock_msg_perm+0x94/0x150 [ 376.037687][T10469] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 376.043124][T10469] ? security_socket_sendmsg+0x80/0xa0 [ 376.048975][T10469] sock_write_iter+0x2df/0x420 [ 376.053804][T10469] ? sock_read_iter+0x3e0/0x3e0 [ 376.058815][T10469] ? common_file_perm+0x198/0x1f0 [ 376.063911][T10469] vfs_write+0x46c/0x990 [ 376.068491][T10469] ? file_end_write+0x250/0x250 [ 376.073433][T10469] ? __fget_files+0x43d/0x4b0 [ 376.078267][T10469] ? __fdget_pos+0x1d8/0x330 [ 376.082976][T10469] ? ksys_write+0x75/0x260 [ 376.087461][T10469] ksys_write+0x150/0x260 [ 376.092059][T10469] ? __ia32_sys_read+0x90/0x90 [ 376.096963][T10469] ? lockdep_hardirqs_on+0x98/0x150 [ 376.102238][T10469] do_syscall_64+0x55/0xa0 [ 376.106709][T10469] ? clear_bhb_loop+0x40/0x90 [ 376.111545][T10469] ? clear_bhb_loop+0x40/0x90 [ 376.113172][ C1] net_ratelimit: 4755 callbacks suppressed [ 376.113232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.116362][T10469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.124098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.134283][T10469] RIP: 0033:0x7fdf0a59c819 [ 376.134313][T10469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.134330][T10469] RSP: 002b:00007fdf0b42d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.134354][T10469] RAX: ffffffffffffffda RBX: 00007fdf0a815fa0 RCX: 00007fdf0a59c819 [ 376.141960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.152160][T10469] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000003 [ 376.152179][T10469] RBP: 00007fdf0b42d090 R08: 0000000000000000 R09: 0000000000000000 [ 376.152191][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.152203][T10469] R13: 00007fdf0a816038 R14: 00007fdf0a815fa0 R15: 00007ffe870053d8 [ 376.152234][T10469] [ 376.158110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 376.256862][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.269523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.282842][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.295702][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 376.309970][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.322917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 376.418056][T10469] Mem-Info: [ 376.421271][T10469] active_anon:7390 inactive_anon:0 isolated_anon:0 [ 376.421271][T10469] active_file:17851 inactive_file:40046 isolated_file:0 [ 376.421271][T10469] unevictable:768 dirty:79 writeback:0 [ 376.421271][T10469] slab_reclaimable:10403 slab_unreclaimable:99861 [ 376.421271][T10469] mapped:24330 shmem:1361 pagetables:532 [ 376.421271][T10469] sec_pagetables:0 bounce:0 [ 376.421271][T10469] kernel_misc_reclaimable:0 [ 376.421271][T10469] free:1333057 free_pcp:12573 free_cma:0 [ 376.621902][T10469] Node 0 active_anon:29760kB inactive_anon:0kB active_file:71404kB inactive_file:159980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97420kB dirty:316kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10912kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no [ 376.689374][T10485] netlink: 'syz.0.1252': attribute type 4 has an invalid length. [ 376.742936][T10485] netlink: 174904 bytes leftover after parsing attributes in process `syz.0.1252'. [ 376.827275][T10469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 376.927147][T10469] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.135247][T10469] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 377.165174][T10469] Node 0 DMA32 free:1436804kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:29624kB inactive_anon:0kB active_file:71404kB inactive_file:159156kB unevictable:1536kB writepending:316kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:14668kB local_pcp:2032kB free_cma:0kB [ 377.342876][T10469] lowmem_reserve[]: 0 0 0 0 0 [ 377.348101][T10469] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 377.434168][T10469] lowmem_reserve[]: 0 0 0 0 0 [ 377.453111][T10469] Node 1 Normal free:3899772kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16064kB local_pcp:5696kB free_cma:0kB [ 377.492660][T10494] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 377.507684][T10494] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1255'. [ 377.546728][T10498] netlink: 'syz.1.1255': attribute type 4 has an invalid length. [ 377.570332][T10469] lowmem_reserve[]: 0 0 0 0 0 [ 377.584233][T10469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.614051][T10498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1255'. [ 377.629621][T10469] Node 0 DMA32: 1562*4kB (UME) 1513*8kB (UME) 1018*16kB (UME) 1138*32kB (UME) 1276*64kB (UME) 739*128kB (UME) 194*256kB (UM) 77*512kB (UM) 51*1024kB (UME) 21*2048kB (UM) 244*4096kB (UM) = 1431056kB [ 377.685834][T10469] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 377.709507][T10469] Node 1 Normal: 201*4kB (UME) 49*8kB (UME) 23*16kB (UME) 49*32kB (UME) 17*64kB (UME) 6*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3899772kB [ 377.747758][T10469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.789482][T10469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.827399][T10469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.870310][T10469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.897384][T10469] 59683 total pagecache pages [ 377.916617][T10469] 0 pages in swap cache [ 377.930387][T10469] Free swap = 124996kB [ 377.939560][T10469] Total swap = 124996kB [ 377.954024][T10469] 2097051 pages RAM [ 377.960845][T10469] 0 pages HighMem/MovableOnly [ 377.976334][T10499] delete_channel: no stack [ 377.989565][T10469] 416926 pages reserved [ 377.998295][T10469] 0 pages cma reserved [ 378.865387][T10516] netlink: 'syz.2.1260': attribute type 10 has an invalid length. [ 378.993954][T10516] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1260'. [ 379.296742][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.317241][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.369482][T10522] netlink: 'syz.0.1261': attribute type 10 has an invalid length. [ 379.395257][T10522] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1261'. [ 379.814698][T10527] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.1263'. [ 380.010405][T10532] netlink: 'syz.1.1265': attribute type 2 has an invalid length. [ 380.188927][T10532] netlink: 'syz.1.1265': attribute type 8 has an invalid length. [ 380.381257][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1265'. [ 380.504994][T10539] netlink: 'syz.2.1267': attribute type 29 has an invalid length. [ 380.643656][T10542] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1268'. [ 380.669945][T10542] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 381.122055][ C1] net_ratelimit: 4482 callbacks suppressed [ 381.122076][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.141073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.153959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.167025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 381.181854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.195033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 381.211817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.225285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 381.240266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.253551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 382.258147][T10556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1272'. [ 382.518029][T10563] netlink: 'syz.3.1272': attribute type 10 has an invalid length. [ 383.555244][T10563] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1272'. [ 385.984811][T10569] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 386.010391][T10569] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1275'. [ 386.131771][ C1] net_ratelimit: 3188 callbacks suppressed [ 386.131789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.150484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 386.164918][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.177715][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.190816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.203627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 386.217498][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.230340][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 386.243371][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 386.256198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 387.444839][T10580] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1279'. [ 389.608414][T10614] netlink: 'syz.1.1288': attribute type 10 has an invalid length. [ 389.637700][T10614] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1288'. [ 390.175546][T10627] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1292'. [ 391.161121][ C1] net_ratelimit: 6150 callbacks suppressed [ 391.161211][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.191938][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 391.220808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.234923][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.255634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.271221][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 391.295790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.310025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.325677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 391.344737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 392.588981][T10658] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1300'. [ 396.191184][ C1] net_ratelimit: 2208 callbacks suppressed [ 396.191248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.247626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.277615][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.308917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 396.383218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.416479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 396.441902][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.471590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 396.540843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 396.572579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.035780][T10706] netlink: 'syz.1.1312': attribute type 10 has an invalid length. [ 398.076090][T10706] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1312'. [ 398.357818][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 398.490971][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 398.599910][T10711] netlink: 'syz.2.1314': attribute type 10 has an invalid length. [ 398.616454][T10711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1314'. [ 398.678557][T10711] bridge0: port 4(team0) entered blocking state [ 398.731500][T10711] bridge0: port 4(team0) entered disabled state [ 398.772734][T10711] team0: entered allmulticast mode [ 398.808207][T10711] C: entered allmulticast mode [ 398.840215][T10711] team_slave_1: entered allmulticast mode [ 398.888833][T10711] dummy0: entered allmulticast mode [ 398.984627][T10711] team0: entered promiscuous mode [ 399.001231][T10711] C: entered promiscuous mode [ 399.018705][T10711] team_slave_1: entered promiscuous mode [ 399.044789][T10711] dummy0: entered promiscuous mode [ 399.075367][T10711] bridge0: port 4(team0) entered blocking state [ 399.082723][T10711] bridge0: port 4(team0) entered forwarding state [ 401.201209][ C1] net_ratelimit: 2814 callbacks suppressed [ 401.201289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.221396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.234951][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.261581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 401.320386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.351329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.381638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.395130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 401.410984][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 401.424713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 401.805628][ T5084] Bluetooth: hci2: ISO packet for unknown connection handle 815 [ 401.988251][T10731] netlink: 'syz.2.1321': attribute type 17 has an invalid length. [ 402.046944][T10731] netlink: 'syz.2.1321': attribute type 16 has an invalid length. [ 402.148054][T10731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1321'. [ 402.627305][T10744] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1324'. [ 403.234637][T10745] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 403.309378][T10745] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1324'. [ 403.885463][T10754] netlink: 138128 bytes leftover after parsing attributes in process `syz.2.1326'. [ 404.706042][T10766] netlink: 'syz.0.1329': attribute type 10 has an invalid length. [ 404.791557][T10766] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1329'. [ 405.125355][T10770] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1331'. [ 406.201996][ C1] net_ratelimit: 4585 callbacks suppressed [ 406.202019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.221415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 406.236142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.250063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.263290][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.276997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 406.291673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.305147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 406.318600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.332754][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:e2:29:05:1f:3f:4d, vlan:0) [ 406.504226][T10781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1333'. [ 406.823171][T10781] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1333'. [ 406.870556][T10793] netlink: 'syz.2.1336': attribute type 10 has an invalid length. [ 406.915089][T10793] bridge0: port 4(team0) entered disabled state [ 406.922216][T10793] bridge0: port 3(veth0_to_bridge) entered disabled state [ 406.929946][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.938768][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.179874][T10801] tap0: tun_chr_ioctl cmd 1074025675 [ 407.185619][T10801] tap0: persist enabled [ 407.199479][T10801] tap0: tun_chr_ioctl cmd 1074025675 [ 407.205265][T10801] tap0: persist enabled [ 407.210237][T10801] tap0: tun_chr_ioctl cmd 2147767520 [ 407.285361][T10803] netlink: 'syz.2.1339': attribute type 10 has an invalid length. [ 407.334889][T10803] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1339'. [ 407.636731][T10811] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1341'. [ 407.797669][T10811] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 407.870310][T10811] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1341'. [ 408.079638][T10811] netlink: 'syz.0.1341': attribute type 21 has an invalid length. [ 408.124758][T10811] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1341'. [ 408.344065][T10807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1341'. [ 408.410240][T10807] bridge_slave_0: entered allmulticast mode [ 409.507320][T10848] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 409.521849][T10848] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1351'. [ 409.856217][T10857] syzkaller0: left promiscuous mode [ 409.879645][T10857] syzkaller0: left allmulticast mode [ 410.229338][T10865] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1364'. [ 410.272914][T10866] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1356'. [ 410.422866][T10865] netlink: 'syz.2.1364': attribute type 10 has an invalid length. [ 410.506297][T10865] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 410.610652][T10865] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 410.660657][T10865] team0: Port device wlan1 added [ 410.709536][T10863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.239506][T10874] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1358'. [ 411.636471][T10881] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 411.688292][T10881] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1369'. [ 412.031713][T10892] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 412.054552][T10892] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 413.476203][T10917] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1370'. [ 413.517599][T10917] net_ratelimit: 648 callbacks suppressed [ 413.517620][T10917] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 413.579453][T10921] netlink: 'syz.0.1370': attribute type 10 has an invalid length. [ 413.599517][T10917] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 413.635128][T10921] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 413.842787][T10921] team0: Port device wlan1 added [ 413.952043][T10916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.302868][T10933] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1375'. [ 414.694533][T10936] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1376'. [ 415.613153][T10940] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 415.702701][T10940] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 415.986398][T10943] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 416.006853][T10943] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 416.395202][ T9157] wlan1: Trigger new scan to find an IBSS to join [ 417.495913][T10976] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1386'. [ 417.600269][T10976] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 417.643186][T10976] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 418.214201][T10975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.387426][T10980] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1385'. [ 420.397993][T10979] netlink: 'syz.3.1386': attribute type 10 has an invalid length. [ 420.410798][T10979] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 420.449047][T10979] team0: Port device wlan1 added [ 420.599306][T10987] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1388'. [ 421.215095][T10995] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1389'. [ 421.433778][ T9144] wlan1: Trigger new scan to find an IBSS to join [ 422.493396][ T63] wlan1: Creating new IBSS network, BSSID e6:14:a7:e0:24:51 [ 423.496221][T11029] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1396'. [ 427.205741][T11061] netlink: 'syz.2.1409': attribute type 21 has an invalid length. [ 427.493309][T11080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1414'. [ 428.863892][T11098] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1419'. [ 428.901957][T11098] openvswitch: netlink: Key type 4112 is out of range max 32 [ 429.949689][T11121] delete_channel: no stack [ 430.280964][T11127] pimreg0: tun_chr_ioctl cmd 1074025681 [ 430.788160][T11145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1434'. [ 430.851892][T11146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1434'. [ 430.932608][T11151] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 430.970308][T11151] netlink: 'syz.0.1436': attribute type 2 has an invalid length. [ 431.005682][T11151] netlink: 'syz.0.1436': attribute type 2 has an invalid length. [ 431.031585][T11151] netlink: 'syz.0.1436': attribute type 3 has an invalid length. [ 431.110236][T11151] netlink: 'syz.0.1436': attribute type 4 has an invalid length. [ 431.199371][T11151] netlink: 'syz.0.1436': attribute type 5 has an invalid length. [ 431.250593][T11151] netlink: 'syz.0.1436': attribute type 6 has an invalid length. [ 431.286421][T11151] netlink: 'syz.0.1436': attribute type 7 has an invalid length. [ 431.334114][T11151] netlink: 'syz.0.1436': attribute type 9 has an invalid length. [ 431.410541][T11151] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1436'. [ 431.488892][T11148] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1435'. [ 431.892657][T11170] netlink: set zone limit has 8 unknown bytes [ 432.221209][T11183] : renamed from pim6reg1 [ 432.246918][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1443'. [ 432.292775][T11184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1443'. [ 432.326155][T11186] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1443'. [ 432.352382][T11189] validate_nla: 3 callbacks suppressed [ 432.352403][T11189] netlink: 'syz.2.1446': attribute type 10 has an invalid length. [ 432.398268][T11189] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1446'. [ 433.078847][T11204] netlink: 'syz.2.1451': attribute type 3 has an invalid length. [ 433.100290][T11204] __nla_validate_parse: 1 callbacks suppressed [ 433.100312][T11204] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1451'. [ 433.424614][T11202] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1449'. [ 433.445025][T11202] bridge_slave_1: default FDB implementation only supports local addresses [ 433.930986][T11216] syzkaller0: entered promiscuous mode [ 433.954031][T11216] syzkaller0: entered allmulticast mode [ 434.049729][T11222] netlink: 'syz.3.1455': attribute type 3 has an invalid length. [ 434.078393][T11222] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1455'. [ 438.713941][T11223] netlink: 'syz.3.1455': attribute type 39 has an invalid length. [ 438.723960][T11223] veth0_macvtap: left promiscuous mode [ 439.253742][T11269] netlink: 'syz.2.1466': attribute type 29 has an invalid length. [ 439.266346][T11268] netlink: 'syz.2.1466': attribute type 29 has an invalid length. [ 439.286864][T11270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1465'. [ 439.356787][T11268] netlink: 'syz.2.1466': attribute type 29 has an invalid length. [ 439.388661][T11266] netlink: 'syz.2.1466': attribute type 29 has an invalid length. [ 439.417568][T11274] FAULT_INJECTION: forcing a failure. [ 439.417568][T11274] name failslab, interval 1, probability 0, space 0, times 0 [ 439.457916][T11274] CPU: 0 PID: 11274 Comm: syz.0.1468 Not tainted syzkaller #0 [ 439.465646][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.476193][T11274] Call Trace: [ 439.479720][T11274] [ 439.482729][T11274] dump_stack_lvl+0x18c/0x250 [ 439.487575][T11274] ? show_regs_print_info+0x20/0x20 [ 439.493229][T11274] ? load_image+0x420/0x420 [ 439.497814][T11274] ? __might_sleep+0xe0/0xe0 [ 439.502821][T11274] ? __lock_acquire+0x7d40/0x7d40 [ 439.507920][T11274] should_fail_ex+0x39d/0x4d0 [ 439.512771][T11274] should_failslab+0x9/0x20 [ 439.517428][T11274] slab_pre_alloc_hook+0x59/0x310 [ 439.522618][T11274] ? __get_vm_area_node+0x125/0x370 [ 439.527973][T11274] __kmem_cache_alloc_node+0x53/0x250 [ 439.533505][T11274] ? __get_vm_area_node+0x125/0x370 [ 439.538873][T11274] kmalloc_node_trace+0x26/0xe0 [ 439.543799][T11274] __get_vm_area_node+0x125/0x370 [ 439.548989][T11274] __vmalloc_node_range+0x36e/0x1330 [ 439.554346][T11274] ? copy_process+0x586/0x3d80 [ 439.559306][T11274] ? free_vm_area+0x50/0x50 [ 439.563974][T11274] ? arch_dup_task_struct+0x57/0xd0 [ 439.569418][T11274] ? __asan_memcpy+0x40/0x70 [ 439.574163][T11274] dup_task_struct+0x3d0/0x7c0 [ 439.579024][T11274] ? copy_process+0x586/0x3d80 [ 439.583853][T11274] ? lockdep_hardirqs_on+0x98/0x150 [ 439.589288][T11274] copy_process+0x586/0x3d80 [ 439.594027][T11274] ? __might_fault+0xaa/0x120 [ 439.598881][T11274] ? get_pid_task+0x20/0x1e0 [ 439.603631][T11274] ? __pidfd_prepare+0x140/0x140 [ 439.608930][T11274] kernel_clone+0x24b/0x8a0 [ 439.613675][T11274] ? create_io_thread+0x190/0x190 [ 439.618786][T11274] __x64_sys_clone+0x1b7/0x230 [ 439.623729][T11274] ? __fget_files+0x43d/0x4b0 [ 439.628479][T11274] ? __ia32_sys_vfork+0x140/0x140 [ 439.633588][T11274] ? lock_chain_count+0x20/0x20 [ 439.638712][T11274] ? lockdep_hardirqs_on+0x98/0x150 [ 439.644243][T11274] do_syscall_64+0x55/0xa0 [ 439.648906][T11274] ? clear_bhb_loop+0x40/0x90 [ 439.653852][T11274] ? clear_bhb_loop+0x40/0x90 [ 439.658736][T11274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.665050][T11274] RIP: 0033:0x7f49d939c819 [ 439.669732][T11274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.690023][T11274] RSP: 002b:00007f49da320fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 439.698872][T11274] RAX: ffffffffffffffda RBX: 00007f49d9615fa0 RCX: 00007f49d939c819 [ 439.707350][T11274] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000001000000 [ 439.715500][T11274] RBP: 00007f49da321090 R08: 0000000000000000 R09: 0000000000000000 [ 439.723798][T11274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 439.732101][T11274] R13: 00007f49d9616038 R14: 00007f49d9615fa0 R15: 00007ffd128e6ad8 [ 439.741026][T11274] [ 439.791453][T11274] syz.0.1468: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 439.828246][T11274] CPU: 0 PID: 11274 Comm: syz.0.1468 Not tainted syzkaller #0 [ 439.835826][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.846382][T11274] Call Trace: [ 439.849943][T11274] [ 439.853211][T11274] dump_stack_lvl+0x18c/0x250 [ 439.858055][T11274] ? show_regs_print_info+0x20/0x20 [ 439.863603][T11274] ? load_image+0x420/0x420 [ 439.868246][T11274] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 439.874801][T11274] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 439.881900][T11274] warn_alloc+0x246/0x340 [ 439.886305][T11274] ? __get_vm_area_node+0x125/0x370 [ 439.891575][T11274] ? zone_watermark_ok_safe+0x230/0x230 [ 439.897531][T11274] ? rcu_is_watching+0x15/0xb0 [ 439.902642][T11274] ? __get_vm_area_node+0x356/0x370 [ 439.907986][T11274] __vmalloc_node_range+0x393/0x1330 [ 439.913373][T11274] ? free_vm_area+0x50/0x50 [ 439.918313][T11274] ? arch_dup_task_struct+0x57/0xd0 [ 439.923672][T11274] ? __asan_memcpy+0x40/0x70 [ 439.928843][T11274] dup_task_struct+0x3d0/0x7c0 [ 439.933673][T11274] ? copy_process+0x586/0x3d80 [ 439.938679][T11274] ? lockdep_hardirqs_on+0x98/0x150 [ 439.944078][T11274] copy_process+0x586/0x3d80 [ 439.948952][T11274] ? __might_fault+0xaa/0x120 [ 439.953722][T11274] ? get_pid_task+0x20/0x1e0 [ 439.958631][T11274] ? __pidfd_prepare+0x140/0x140 [ 439.963805][T11274] kernel_clone+0x24b/0x8a0 [ 439.968475][T11274] ? create_io_thread+0x190/0x190 [ 439.974105][T11274] __x64_sys_clone+0x1b7/0x230 [ 439.979124][T11274] ? __fget_files+0x43d/0x4b0 [ 439.983945][T11274] ? __ia32_sys_vfork+0x140/0x140 [ 439.989454][T11274] ? lock_chain_count+0x20/0x20 [ 439.994483][T11274] ? lockdep_hardirqs_on+0x98/0x150 [ 439.999741][T11274] do_syscall_64+0x55/0xa0 [ 440.004553][T11274] ? clear_bhb_loop+0x40/0x90 [ 440.009476][T11274] ? clear_bhb_loop+0x40/0x90 [ 440.014222][T11274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.020323][T11274] RIP: 0033:0x7f49d939c819 [ 440.025055][T11274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.045143][T11274] RSP: 002b:00007f49da320fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 440.053775][T11274] RAX: ffffffffffffffda RBX: 00007f49d9615fa0 RCX: 00007f49d939c819 [ 440.061818][T11274] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000001000000 [ 440.070037][T11274] RBP: 00007f49da321090 R08: 0000000000000000 R09: 0000000000000000 [ 440.078393][T11274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 440.086550][T11274] R13: 00007f49d9616038 R14: 00007f49d9615fa0 R15: 00007ffd128e6ad8 [ 440.094788][T11274] [ 440.271504][T11274] Mem-Info: [ 440.275096][T11274] active_anon:22363 inactive_anon:0 isolated_anon:0 [ 440.275096][T11274] active_file:22240 inactive_file:40070 isolated_file:0 [ 440.275096][T11274] unevictable:768 dirty:70 writeback:0 [ 440.275096][T11274] slab_reclaimable:10722 slab_unreclaimable:97960 [ 440.275096][T11274] mapped:26604 shmem:16278 pagetables:590 [ 440.275096][T11274] sec_pagetables:0 bounce:0 [ 440.275096][T11274] kernel_misc_reclaimable:0 [ 440.275096][T11274] free:1321342 free_pcp:7084 free_cma:0 [ 440.391478][T11274] Node 0 active_anon:86600kB inactive_anon:0kB active_file:88960kB inactive_file:160076kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107128kB dirty:280kB writeback:0kB shmem:60988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10600kB pagetables:2212kB sec_pagetables:0kB all_unreclaimable? no [ 440.466764][T11284] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 440.484416][T11284] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1472'. [ 440.523455][T11285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1471'. [ 440.545855][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.552672][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.562826][T11274] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 440.602008][T11285] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1471'. [ 440.611062][T11285] bridge_slave_0: entered allmulticast mode [ 440.612274][T11274] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 440.672015][T11285] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1471'. [ 440.687847][T11274] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 440.702421][T11274] Node 0 DMA32 free:1370008kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:83608kB inactive_anon:0kB active_file:88960kB inactive_file:159252kB unevictable:1536kB writepending:280kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:17864kB local_pcp:8704kB free_cma:0kB [ 440.797561][T11274] lowmem_reserve[]: 0 0 0 0 0 [ 440.835853][T11274] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 440.908732][T11274] lowmem_reserve[]: 0 0 0 0 0 [ 440.960466][T11274] Node 1 Normal free:3899772kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16064kB local_pcp:5696kB free_cma:0kB [ 441.069696][T11274] lowmem_reserve[]: 0 0 0 0 0 [ 441.093082][T11274] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 441.117296][T11274] Node 0 DMA32: 2686*4kB (UME) 1975*8kB (UME) 1657*16kB (UME) 976*32kB (UM) 959*64kB (UME) 632*128kB (UME) 113*256kB (UM) 25*512kB (UM) 49*1024kB (UME) 23*2048kB (UM) 245*4096kB (UM) = 1369088kB [ 441.196544][T11274] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 441.239566][T11274] Node 1 Normal: 201*4kB (UME) 49*8kB (UME) 23*16kB (UME) 49*32kB (UME) 17*64kB (UME) 6*128kB (UM) 2*256kB (UM) 0*512kB 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3899772kB [ 441.315913][T11274] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 441.354069][T11274] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 441.400314][T11274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 441.450333][T11274] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 441.503447][T11274] 73775 total pagecache pages [ 441.520699][T11274] 0 pages in swap cache [ 441.558143][T11274] Free swap = 124996kB [ 441.595014][T11274] Total swap = 124996kB [ 441.664937][T11274] 2097051 pages RAM [ 441.669011][T11274] 0 pages HighMem/MovableOnly [ 441.692679][T11274] 416926 pages reserved [ 441.696922][T11274] 0 pages cma reserved [ 441.835574][T11301] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1477'. [ 442.549287][T11311] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1480'. [ 443.040236][T11317] netlink: 'syz.2.1481': attribute type 39 has an invalid length. [ 443.281000][T11319] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1482'. [ 443.425634][T11323] netlink: 'syz.1.1483': attribute type 10 has an invalid length. [ 443.463799][T11323] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1483'. [ 445.162536][T11345] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1491'. [ 447.600518][T11353] netlink: 'syz.3.1492': attribute type 3 has an invalid length. [ 447.712380][T11353] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.1492'. [ 448.629076][T11358] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 448.664699][T11358] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1494'. [ 449.202865][T11368] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1497'. [ 449.235520][T11368] netlink: zone id is out of range [ 449.300462][T11368] netlink: zone id is out of range [ 449.309276][T11368] netlink: zone id is out of range [ 449.327842][T11368] netlink: zone id is out of range [ 449.342375][T11368] netlink: zone id is out of range [ 449.361958][T11368] netlink: zone id is out of range [ 449.382161][T11368] netlink: zone id is out of range [ 449.388042][T11368] netlink: zone id is out of range [ 449.412804][T11368] netlink: zone id is out of range [ 449.432161][T11368] netlink: zone id is out of range [ 452.757407][T11396] FAULT_INJECTION: forcing a failure. [ 452.757407][T11396] name failslab, interval 1, probability 0, space 0, times 0 [ 452.825203][T11396] CPU: 1 PID: 11396 Comm: syz.3.1504 Not tainted syzkaller #0 [ 452.832970][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 452.843653][T11396] Call Trace: [ 452.847035][T11396] [ 452.850060][T11396] dump_stack_lvl+0x18c/0x250 [ 452.854857][T11396] ? show_regs_print_info+0x20/0x20 [ 452.860375][T11396] ? load_image+0x420/0x420 [ 452.865208][T11396] ? __might_sleep+0xe0/0xe0 [ 452.870430][T11396] ? __lock_acquire+0x7d40/0x7d40 [ 452.875700][T11396] should_fail_ex+0x39d/0x4d0 [ 452.880869][T11396] should_failslab+0x9/0x20 [ 452.885658][T11396] slab_pre_alloc_hook+0x59/0x310 [ 452.890798][T11396] kmem_cache_alloc_node+0x60/0x320 [ 452.896159][T11396] ? mark_lock+0x94/0x320 [ 452.900580][T11396] ? __alloc_skb+0x103/0x2c0 [ 452.905264][T11396] __alloc_skb+0x103/0x2c0 [ 452.909758][T11396] tipc_msg_build+0x161/0xee0 [ 452.914612][T11396] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 452.920873][T11396] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 452.927149][T11396] __tipc_sendstream+0x8a9/0x1270 [ 452.932606][T11396] ? tsk_advance_rx_queue+0x310/0x310 [ 452.938761][T11396] ? wait_woken+0x180/0x180 [ 452.943419][T11396] ? _local_bh_enable+0xa0/0xa0 [ 452.948553][T11396] tipc_sendstream+0x55/0x70 [ 452.953389][T11396] ? tipc_getsockopt+0x5a0/0x5a0 [ 452.958400][T11396] ____sys_sendmsg+0x5ba/0x960 [ 452.963250][T11396] ? __asan_memset+0x22/0x40 [ 452.968076][T11396] ? __sys_sendmsg_sock+0x30/0x30 [ 452.973547][T11396] ? __import_iovec+0x5f2/0x850 [ 452.978564][T11396] ? import_iovec+0x73/0xa0 [ 452.983241][T11396] ___sys_sendmsg+0x2a6/0x360 [ 452.988173][T11396] ? __sys_sendmsg+0x2a0/0x2a0 [ 452.993149][T11396] ? __lock_acquire+0x7d40/0x7d40 [ 452.998656][T11396] __se_sys_sendmsg+0x1c2/0x2b0 [ 453.003778][T11396] ? __x64_sys_sendmsg+0x80/0x80 [ 453.008817][T11396] ? lockdep_hardirqs_on+0x98/0x150 [ 453.014283][T11396] do_syscall_64+0x55/0xa0 [ 453.018842][T11396] ? clear_bhb_loop+0x40/0x90 [ 453.023585][T11396] ? clear_bhb_loop+0x40/0x90 [ 453.028328][T11396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.034278][T11396] RIP: 0033:0x7fdf0a59c819 [ 453.038755][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.058595][T11396] RSP: 002b:00007fdf0b40c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.067275][T11396] RAX: ffffffffffffffda RBX: 00007fdf0a816090 RCX: 00007fdf0a59c819 [ 453.075384][T11396] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 453.083680][T11396] RBP: 00007fdf0b40c090 R08: 0000000000000000 R09: 0000000000000000 [ 453.091714][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.099917][T11396] R13: 00007fdf0a816128 R14: 00007fdf0a816090 R15: 00007ffe870053d8 [ 453.108124][T11396] [ 454.563785][T11414] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1510'. [ 454.622691][ T2979] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 457.164675][T11443] netlink: 'syz.2.1518': attribute type 2 has an invalid length. [ 457.306070][T11443] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1518'. [ 458.247997][T11443] dummy0 (unregistering): left promiscuous mode [ 458.288901][T11443] dummy0 (unregistering): left allmulticast mode [ 458.484299][T11443] team0: Port device dummy0 removed [ 469.483109][T11523] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1541'. [ 471.926338][T11552] netlink: 'syz.1.1552': attribute type 3 has an invalid length. [ 471.970043][T11552] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1552'. [ 473.521790][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 473.563312][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 474.172993][T11577] net_ratelimit: 35 callbacks suppressed [ 474.173010][T11577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.055674][T11591] netlink: 'syz.2.1563': attribute type 3 has an invalid length. [ 475.101079][T11591] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1563'. [ 477.042248][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 477.807962][T11632] syzkaller0: entered promiscuous mode [ 477.837024][T11632] syzkaller0: entered allmulticast mode [ 478.013718][T11639] netlink: 'syz.1.1573': attribute type 10 has an invalid length. [ 478.039011][T11639] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1573'. [ 478.070185][T11639] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 479.402133][T11639] batman_adv: batadv0: Removing interface: veth0_vlan [ 479.562715][T11651] netlink: 'syz.2.1576': attribute type 3 has an invalid length. [ 479.589266][T11651] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1576'. [ 479.610366][T11644] mac80211_hwsim hwsim3 ..c: renamed from wlan1 (while UP) [ 479.691771][T11650] netlink: 16182 bytes leftover after parsing attributes in process `syz.2.1576'. [ 479.825654][T11654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1577'. [ 482.859943][T11654] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 482.867308][T11654] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 482.882350][T11655] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 482.889510][T11655] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 482.914278][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 483.050946][T11672] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 483.071427][T11672] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1581'. [ 484.012186][T11693] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.1586'. [ 486.410327][T11713] pim6reg1: entered promiscuous mode [ 486.429692][T11713] pim6reg1: entered allmulticast mode [ 486.514917][T11720] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1592'. [ 486.627235][ T2979] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.674322][T11725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1595'. [ 486.710014][T11727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1595'. [ 486.825901][T11730] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.1596'. [ 488.678978][T11762] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1606'. [ 488.689697][T11762] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 488.755165][T11764] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.1607'. [ 489.237199][T11775] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 489.254676][T11775] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1609'. [ 490.302849][T11782] delete_channel: no stack [ 490.307609][T11782] delete_channel: no stack [ 490.966186][T11803] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1618'. [ 491.163929][T11811] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.1622'. [ 491.805930][T11827] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1626'. [ 492.576557][T11839] netlink: 209032 bytes leftover after parsing attributes in process `syz.0.1630'. [ 493.205369][T11868] netlink: 'syz.3.1635': attribute type 29 has an invalid length. [ 493.252010][T11868] netlink: 'syz.3.1635': attribute type 29 has an invalid length. [ 493.332120][T11857] netlink: 'syz.2.1632': attribute type 10 has an invalid length. [ 494.322252][T11888] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 494.330533][T11888] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1641'. [ 494.420578][T11895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1642'. [ 494.473036][T11895] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1642'. [ 494.563056][T11897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1642'. [ 494.609904][T11898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1642'. [ 495.165554][T11897] netlink: 3827 bytes leftover after parsing attributes in process `syz.0.1642'. [ 495.191606][T11897] netlink: 3827 bytes leftover after parsing attributes in process `syz.0.1642'. [ 495.222284][T11897] netlink: 3827 bytes leftover after parsing attributes in process `syz.0.1642'. [ 495.738066][T11912] netlink: 'syz.3.1647': attribute type 9 has an invalid length. [ 495.773038][T11912] netlink: 84908 bytes leftover after parsing attributes in process `syz.3.1647'. [ 495.795980][T11916] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.1648'. [ 495.821560][T11913] netlink: 'syz.3.1647': attribute type 9 has an invalid length. [ 496.156844][T11922] netlink: 'syz.3.1650': attribute type 2 has an invalid length. [ 496.547221][T11926] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 498.096186][T11953] netlink: 'syz.3.1659': attribute type 21 has an invalid length. [ 498.125987][T11953] netlink: 'syz.3.1659': attribute type 20 has an invalid length. [ 499.530801][T11986] __nla_validate_parse: 4 callbacks suppressed [ 499.530839][T11986] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1667'. [ 499.649592][T11986] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 500.240489][T12000] netlink: 'syz.1.1671': attribute type 17 has an invalid length. [ 500.271667][T12000] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1671'. [ 500.298208][T12000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.322431][T11997] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1671'. [ 500.602928][T12000] netlink: 'syz.1.1671': attribute type 10 has an invalid length. [ 500.638248][T12000] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1671'. [ 501.833137][T12026] netlink: 'syz.3.1679': attribute type 21 has an invalid length. [ 501.921085][T12026] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1679'. [ 501.986398][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.994236][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.079247][T12055] tap0: tun_chr_ioctl cmd 1074025675 [ 505.111420][T12055] tap0: persist enabled [ 505.143099][T12050] tap0: tun_chr_ioctl cmd 1074025675 [ 505.180396][T12050] tap0: persist enabled [ 505.208328][T12061] netlink: 'syz.3.1687': attribute type 9 has an invalid length. [ 505.253354][T12061] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1687'. [ 505.863906][T12065] netlink: 'syz.1.1688': attribute type 5 has an invalid length. [ 505.883114][T12065] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1688'. [ 506.194860][T12067] netlink: 'syz.2.1689': attribute type 25 has an invalid length. [ 506.232338][T12067] netlink: 'syz.2.1689': attribute type 3 has an invalid length. [ 506.251975][T12067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1689'. [ 506.266243][T12072] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1691'. [ 508.516244][T12112] netlink: 'syz.3.1703': attribute type 25 has an invalid length. [ 508.606860][T12112] netlink: 'syz.3.1703': attribute type 3 has an invalid length. [ 508.662612][T12112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1703'. [ 508.796164][T12116] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1705'. [ 509.780858][T12129] netlink: 'syz.1.1708': attribute type 6 has an invalid length. [ 509.810438][T12129] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1708'. [ 510.258577][T12145] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1710'. [ 510.366079][T12145] openvswitch: netlink: Flow key attribute not present in set flow. [ 510.651568][T12149] netlink: 'syz.1.1711': attribute type 39 has an invalid length. [ 510.706919][T12149] veth0_macvtap: left promiscuous mode [ 512.770335][T12212] netlink: 'syz.0.1730': attribute type 2 has an invalid length. [ 512.782286][T12212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1730'. [ 513.176414][T12220] netlink: 'syz.3.1731': attribute type 29 has an invalid length. [ 513.200691][T12220] netlink: 'syz.3.1731': attribute type 29 has an invalid length. [ 515.512338][T12271] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1748'. [ 516.970310][T12298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1754'. [ 517.011502][T12298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1754'. [ 517.097111][T12298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1754'. [ 517.362629][T12311] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1754'. [ 517.390653][T12311] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1754'. [ 517.892122][T12313] netlink: 'syz.0.1758': attribute type 10 has an invalid length. [ 518.201747][T12312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.288316][T12315] netlink: 'syz.2.1757': attribute type 4 has an invalid length. [ 519.391160][T12351] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1767'. [ 520.015660][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 520.033489][T12360] netlink: 60931 bytes leftover after parsing attributes in process `syz.1.1770'. [ 520.658187][T12370] netlink: 'syz.3.1772': attribute type 10 has an invalid length. [ 520.806552][T12377] netlink: 'syz.2.1773': attribute type 2 has an invalid length. [ 520.850486][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.944052][T12377] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1773'. [ 521.675051][T12379] delete_channel: no stack [ 521.780951][T12388] -: renamed from syzkaller0 [ 524.305680][T12439] sctp: [Deprecated]: syz.2.1786 (pid 12439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.305680][T12439] Use struct sctp_sack_info instead [ 524.439405][T12438] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 524.467299][T12438] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1789'. [ 525.237852][T12446] -: renamed from syzkaller0 [ 525.925754][T12471] netlink: 'syz.2.1801': attribute type 29 has an invalid length. [ 525.948382][T12471] netlink: 'syz.2.1801': attribute type 29 has an invalid length. [ 525.959567][T12477] netlink: 'syz.2.1801': attribute type 29 has an invalid length. [ 525.992760][T12471] netlink: 'syz.2.1801': attribute type 29 has an invalid length. [ 526.045590][T12477] netlink: 'syz.2.1801': attribute type 29 has an invalid length. [ 527.445384][T12489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1805'. [ 527.458301][T12489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1805'. [ 527.478283][T12489] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1805'. [ 527.629621][T12493] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 527.646463][T12493] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.1808'. [ 527.661393][T12495] netlink: 'syz.0.1815': attribute type 21 has an invalid length. [ 527.669771][T12495] netlink: 'syz.0.1815': attribute type 10 has an invalid length. [ 527.709085][T12495] netlink: 'syz.0.1815': attribute type 12 has an invalid length. [ 527.742477][T12495] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.1815'. [ 527.871441][T12503] C: renamed from team_slave_0 [ 527.888088][T12503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1811'. [ 527.900356][T12503] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 527.924865][T12497] -: renamed from syzkaller0 (while UP) [ 527.960885][T12503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1811'. [ 527.972335][T12503] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 528.177110][T12513] macvlan1: entered promiscuous mode [ 528.239728][T12513] macvlan1: entered allmulticast mode [ 528.333620][T12513] veth1_vlan: entered allmulticast mode [ 529.921708][T12543] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1823'. [ 529.941671][T12543] openvswitch: netlink: Flow key attribute not present in set flow. [ 530.214283][T12550] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1823'. [ 530.459744][T12553] sctp: [Deprecated]: syz.0.1824 (pid 12553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.459744][T12553] Use struct sctp_sack_info instead [ 533.226626][T12571] validate_nla: 9 callbacks suppressed [ 533.226667][T12571] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 534.940792][T12588] netlink: 'syz.0.1834': attribute type 4 has an invalid length. [ 535.006853][T12588] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1834'. [ 536.465348][T12600] netlink: 'syz.3.1838': attribute type 27 has an invalid length. [ 536.477078][T12600] netlink: 'syz.3.1838': attribute type 4 has an invalid length. [ 536.490992][T12600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1838'. [ 536.581572][T12604] netlink: 'syz.2.1839': attribute type 10 has an invalid length. [ 536.616565][T12604] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1839'. [ 536.638057][T12604] team0: Device Q'Y]cRݘOC is loopback device. Loopback devices can't be added as a team port [ 536.668576][T12604] A link change request failed with some changes committed already. Interface Q'Y]cRݘOC may have been left with an inconsistent configuration, please check. [ 537.414531][T12625] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1845'. [ 537.716922][T12631] netlink: 'syz.1.1847': attribute type 10 has an invalid length. [ 537.823736][T12633] netlink: 'syz.1.1847': attribute type 9 has an invalid length. [ 537.881793][T12633] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1847'. [ 538.567365][T12644] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.1852'. [ 539.061929][T12643] delete_channel: no stack [ 539.096553][T12652] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1854'. [ 539.113140][T12652] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 540.710030][T12677] netlink: 'syz.0.1860': attribute type 21 has an invalid length. [ 540.765187][T12677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.773034][T12677] IPv6: NLM_F_CREATE should be set when creating new route [ 540.781404][T12677] IPv6: NLM_F_CREATE should be set when creating new route [ 540.788991][T12677] IPv6: NLM_F_CREATE should be set when creating new route [ 541.566192][T12690] netlink: 120684 bytes leftover after parsing attributes in process `syz.3.1863'. [ 542.244121][T12699] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.1865'. [ 542.453267][T12699] netlink: 8442 bytes leftover after parsing attributes in process `syz.0.1865'. [ 543.583020][T12709] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1870'. [ 544.991622][T12718] netlink: 'syz.2.1872': attribute type 10 has an invalid length. [ 545.031434][T12718] team0: Device hsr_slave_0 failed to register rx_handler [ 546.532463][T12732] netlink: 'syz.2.1876': attribute type 22 has an invalid length. [ 546.540765][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 546.990201][T12737] netlink: 'syz.1.1877': attribute type 3 has an invalid length. [ 547.022766][T12737] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 547.030985][T12737] netlink: 'syz.1.1877': attribute type 6 has an invalid length. [ 547.085664][T12737] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1877'. [ 549.248340][T12763] netlink: 'syz.1.1886': attribute type 21 has an invalid length. [ 549.342377][T12763] netlink: 'syz.1.1886': attribute type 19 has an invalid length. [ 549.350588][T12763] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.1886'. [ 551.722077][T12789] netlink: 'syz.2.1893': attribute type 21 has an invalid length. [ 551.751542][T12789] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1893'. [ 551.771588][T12789] netlink: 'syz.2.1893': attribute type 4 has an invalid length. [ 551.801658][T12789] netlink: 'syz.2.1893': attribute type 5 has an invalid length. [ 551.825954][T12789] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1893'. [ 552.616658][T12802] veth0_vlan: entered allmulticast mode [ 553.825876][T12820] netlink: 'syz.3.1898': attribute type 10 has an invalid length. [ 553.970739][T12820] team0: Port device hsr_slave_0 added [ 554.220773][T12823] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1899'. [ 554.317096][T12823] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 555.054939][ T5084] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 557.212617][T12884] netlink: 17835 bytes leftover after parsing attributes in process `syz.3.1913'. [ 558.039893][T12907] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1918'. [ 558.267762][T12916] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1921'. [ 558.310737][T12916] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1921'. [ 558.343939][T12916] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1921'. [ 558.505789][T12919] netlink: 'syz.2.1922': attribute type 21 has an invalid length. [ 558.521940][T12919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1922'. [ 558.544334][T12919] netlink: 'syz.2.1922': attribute type 8 has an invalid length. [ 558.567551][T12919] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1922'. [ 559.018252][T12938] netlink: 'syz.2.1929': attribute type 39 has an invalid length. [ 559.325889][T12938] hsr_slave_1 (unregistering): left promiscuous mode [ 560.802480][T12960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1935'. [ 560.812549][T12960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1935'. [ 560.842619][T12960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1935'. [ 560.889281][T12960] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1935'. [ 560.906034][T12960] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1935'. [ 560.919165][T12960] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1935'. [ 560.958809][T12960] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1935'. [ 561.067506][T12967] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1938'. [ 561.223129][T12973] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 561.283006][T12973] team0: Device veth1_macvtap failed to register rx_handler [ 561.347449][T12975] netlink: 'syz.0.1940': attribute type 39 has an invalid length. [ 561.489844][T12975] hsr_slave_1 (unregistering): left promiscuous mode [ 561.892957][T12979] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1941'. [ 561.995646][T12979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.148030][T13010] netlink: 'syz.1.1949': attribute type 33 has an invalid length. [ 563.157235][T13010] netlink: 'syz.1.1949': attribute type 3 has an invalid length. [ 563.165449][T13010] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1949'. [ 563.426048][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.437122][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.238754][T13016] netlink: 'syz.1.1950': attribute type 39 has an invalid length. [ 564.543331][T13022] netlink: 'syz.0.1951': attribute type 10 has an invalid length. [ 564.624312][T13022] team0: Device veth1_macvtap failed to register rx_handler [ 565.275097][T13039] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 565.284444][T13039] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 565.832407][T13051] syzkaller0: entered promiscuous mode [ 565.851458][T13051] syzkaller0: entered allmulticast mode [ 565.888435][T13053] __nla_validate_parse: 3 callbacks suppressed [ 565.888457][T13053] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.1963'. [ 565.913239][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1963'. [ 565.926682][T13050] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1962'. [ 566.101195][T13059] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 566.109766][T13059] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1964'. [ 570.928604][T13080] netlink: 'syz.3.1968': attribute type 10 has an invalid length. [ 570.975083][T13080] team0: Device veth1_macvtap failed to register rx_handler [ 571.001728][T13099] netlink: 'syz.2.1973': attribute type 10 has an invalid length. [ 571.009814][T13099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1973'. [ 571.042101][T13099] ipvlan1: entered promiscuous mode [ 571.071521][T13099] ipvlan1: entered allmulticast mode [ 571.077094][T13099] veth0_vlan: entered allmulticast mode [ 571.093663][T13099] bridge0: port 5(ipvlan1) entered blocking state [ 571.105375][T13099] bridge0: port 5(ipvlan1) entered disabled state [ 571.115014][T13099] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 571.143635][T13107] netlink: 'syz.1.1974': attribute type 3 has an invalid length. [ 571.162201][T13107] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1974'. [ 571.286255][T13112] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1975'. [ 571.475200][T13124] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 571.581894][T13124] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 572.329302][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1980'. [ 575.020669][T13174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.079868][T13184] pim6reg1: entered promiscuous mode [ 576.182298][T13184] pim6reg1: entered allmulticast mode [ 576.652993][ T5084] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 576.654629][ T5084] Bluetooth: hci2: hardware error 0x00 [ 576.760423][T13224] netlink: 'syz.3.1995': attribute type 9 has an invalid length. [ 576.794309][T13224] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1995'. [ 576.809166][T13223] netlink: 'syz.3.1995': attribute type 10 has an invalid length. [ 576.951679][T13231] netlink: 'syz.0.1996': attribute type 33 has an invalid length. [ 576.959932][T13231] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1996'. [ 576.982985][T13231] `: renamed from ip6tnl0 (while UP) [ 577.044974][T13231] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 577.372165][T13229] netlink: 'syz.3.1995': attribute type 9 has an invalid length. [ 577.391803][T13229] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1995'. [ 578.422464][T13252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 578.430894][T13252] IPv6: NLM_F_CREATE should be set when creating new route [ 578.440388][T13252] IPv6: NLM_F_CREATE should be set when creating new route [ 578.449074][T13252] IPv6: NLM_F_CREATE should be set when creating new route [ 578.788064][ T5084] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 583.454184][T13290] netlink: 'syz.3.2013': attribute type 3 has an invalid length. [ 583.468570][T13290] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2013'. [ 583.575087][T13292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.001191][T13302] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2024'. [ 584.035626][T13301] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2024'. [ 584.037913][T13304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 584.054554][T13304] IPv6: NLM_F_CREATE should be set when creating new route [ 584.063410][T13304] IPv6: NLM_F_CREATE should be set when creating new route [ 584.071545][T13304] IPv6: NLM_F_CREATE should be set when creating new route [ 584.106196][T13302] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2024'. [ 584.260419][T13311] netlink: 'syz.0.2019': attribute type 3 has an invalid length. [ 584.276331][T13311] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2019'. [ 584.986944][T13332] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2022'. [ 585.785861][T13337] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 585.831710][T13337] syzkaller0: entered promiscuous mode [ 585.837414][T13337] syzkaller0: entered allmulticast mode [ 586.323997][T13364] netlink: 'syz.3.2030': attribute type 9 has an invalid length. [ 586.338189][T13364] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2030'. [ 588.811695][T13385] netlink: 'syz.1.2037': attribute type 9 has an invalid length. [ 589.955387][T13390] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2038'. [ 589.979208][T13390] netlink: 'syz.0.2038': attribute type 21 has an invalid length. [ 590.049132][T13393] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2038'. [ 590.254992][T13396] netlink: 'syz.1.2039': attribute type 39 has an invalid length. [ 590.587231][T13396] syz_tun (unregistering): left allmulticast mode [ 590.612820][T13396] syz_tun (unregistering): left promiscuous mode [ 590.621402][T13396] GPL: port 1(syz_tun) entered disabled state [ 591.327062][T13427] netlink: 'syz.0.2049': attribute type 29 has an invalid length. [ 591.354573][T13427] netlink: 'syz.0.2049': attribute type 29 has an invalid length. [ 591.386873][T13429] netlink: 'syz.0.2049': attribute type 29 has an invalid length. [ 591.506444][T13431] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2050'. [ 591.595835][T13431] netlink: 12403 bytes leftover after parsing attributes in process `syz.1.2050'. [ 591.610906][T13434] Q6`Ҙ: renamed from lo (while UP) [ 591.678418][T13434] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2051'. [ 592.032657][ T5084] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 592.130343][T13443] netlink: 'syz.1.2054': attribute type 153 has an invalid length. [ 592.144884][T13443] netlink: 'syz.1.2054': attribute type 1 has an invalid length. [ 592.153084][T13443] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.2054'. [ 593.145963][T13470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2062'. [ 593.619501][T13488] netlink: 'syz.1.2066': attribute type 29 has an invalid length. [ 594.062285][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 594.310113][T13503] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 594.334359][T13503] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 594.384876][T13506] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 594.397107][T13506] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 594.871633][T13520] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 595.113524][T13516] delete_channel: no stack [ 596.056307][T13551] netlink: 'syz.3.2087': attribute type 21 has an invalid length. [ 596.111548][T13551] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2087'. [ 596.286188][T13555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.490969][T13561] netlink: 'syz.3.2089': attribute type 3 has an invalid length. [ 596.513069][T13561] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2089'. [ 596.775049][T13565] netlink: 'syz.3.2093': attribute type 3 has an invalid length. [ 596.783205][T13565] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2093'. [ 597.058045][T13573] syzkaller0: entered promiscuous mode [ 597.073093][T13573] syzkaller0: entered allmulticast mode [ 597.195183][T13582] netlink: 'syz.1.2096': attribute type 10 has an invalid length. [ 597.433309][T13587] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 597.707853][T13596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2101'. [ 597.736671][T13596] netlink: get zone limit has 4 unknown bytes [ 598.131888][T13599] netlink: 'syz.0.2102': attribute type 21 has an invalid length. [ 599.407834][T13619] netlink: 'syz.1.2106': attribute type 10 has an invalid length. [ 599.416367][T13619] netlink: 209280 bytes leftover after parsing attributes in process `syz.1.2106'. [ 599.427600][T13619] openvswitch: netlink: Flow key attr not present in new flow. [ 599.719613][T13627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2111'. [ 599.781082][T13629] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 599.885938][T13631] netlink: 'syz.2.2110': attribute type 9 has an invalid length. [ 599.931098][T13631] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2110'. [ 600.098775][T13633] netlink: 'syz.2.2110': attribute type 9 has an invalid length. [ 600.161460][T13633] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2110'. [ 601.883842][T13675] validate_nla: 1 callbacks suppressed [ 601.883861][T13675] netlink: 'syz.3.2125': attribute type 33 has an invalid length. [ 601.951339][T13675] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2125'. [ 602.111493][T13675] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 602.909468][T13709] syzkaller0: entered promiscuous mode [ 602.938645][T13709] syzkaller0: entered allmulticast mode [ 603.062547][T13708] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2135'. [ 603.151789][T13708] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2135'. [ 603.176169][T13707] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2135'. [ 603.212034][T13709] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2135'. [ 603.536917][T13722] netlink: 'syz.2.2138': attribute type 10 has an invalid length. [ 603.554516][T13722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2138'. [ 603.592043][T13722] caif0: entered promiscuous mode [ 603.622203][T13722] caif0: entered allmulticast mode [ 603.627905][T13722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.723930][T13718] netlink: 'syz.2.2138': attribute type 21 has an invalid length. [ 603.761499][T13718] netlink: 'syz.2.2138': attribute type 6 has an invalid length. [ 604.110074][T13747] netlink: 'syz.3.2144': attribute type 13 has an invalid length. [ 604.121462][T13747] netlink: 'syz.3.2144': attribute type 58 has an invalid length. [ 604.129843][T13747] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2144'. [ 605.694767][T13780] netlink: 'syz.0.2150': attribute type 15 has an invalid length. [ 605.751150][T13780] netlink: 'syz.0.2150': attribute type 7 has an invalid length. [ 606.512906][T13809] veth1_vlan: left allmulticast mode [ 606.868100][T13809] macvlan1: left allmulticast mode [ 607.104857][T13814] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2162'. [ 607.994990][T13842] netlink: 'syz.3.2169': attribute type 4 has an invalid length. [ 608.020367][T13842] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2169'. [ 608.254060][T13852] netlink: 'syz.3.2171': attribute type 10 has an invalid length. [ 608.691058][T13852] team0: Device wg1 is of different type [ 608.965727][T13884] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2174'. [ 609.054049][T13884] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2174'. [ 609.095092][T13884] netlink: 'syz.0.2174': attribute type 10 has an invalid length. [ 610.350299][T13911] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.2181'. [ 610.755280][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2182'. [ 610.814803][T13914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2182'. [ 610.949028][T13919] netlink: 'syz.1.2183': attribute type 2 has an invalid length. [ 610.959809][T13919] netlink: 'syz.1.2183': attribute type 3 has an invalid length. [ 610.970093][T13919] netlink: 'syz.1.2183': attribute type 4 has an invalid length. [ 610.980075][T13919] netlink: 'syz.1.2183': attribute type 5 has an invalid length. [ 611.000978][T13919] netlink: 'syz.1.2183': attribute type 6 has an invalid length. [ 611.023906][T13919] netlink: 'syz.1.2183': attribute type 7 has an invalid length. [ 611.032275][T13919] netlink: 126232 bytes leftover after parsing attributes in process `syz.1.2183'. [ 611.337946][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 611.820813][T13945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.862708][T13945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.889724][T13945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.911468][T13945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.693933][T13961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2195'. [ 613.461753][T13975] netlink: 'syz.1.2200': attribute type 39 has an invalid length. [ 615.640458][T14032] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 615.671690][T14032] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2214'. [ 616.007260][T14036] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2215'. [ 618.401727][T14038] netlink: 'syz.0.2216': attribute type 4 has an invalid length. [ 618.415950][T14038] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2216'. [ 618.429960][T14045] netlink: 'syz.3.2217': attribute type 29 has an invalid length. [ 618.455884][T14045] netlink: 'syz.3.2217': attribute type 29 has an invalid length. [ 618.470057][T14040] netlink: 'syz.3.2217': attribute type 29 has an invalid length. [ 618.559021][T14040] netlink: 'syz.3.2217': attribute type 29 has an invalid length. [ 618.582533][T14044] netlink: 'syz.1.2218': attribute type 46 has an invalid length. [ 618.590813][T14044] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2218'. [ 618.657677][T14040] pim6reg1: entered allmulticast mode [ 618.680270][T14044] netlink: 'syz.1.2218': attribute type 2 has an invalid length. [ 618.707983][T14044] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2218'. [ 618.713902][T14048] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 618.860039][T14051] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2220'. [ 619.297631][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2223'. [ 619.322286][T14059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.736736][T14116] netlink: 'syz.0.2237': attribute type 10 has an invalid length. [ 623.864433][T14116] team0 (unregistering): Port device C removed [ 623.903611][T14116] team0 (unregistering): Port device team_slave_1 removed [ 623.948560][T14116] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.968634][T14116] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.978605][T14116] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.994245][T14116] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.015900][T14116] team0 (unregistering): Port device geneve1 removed [ 624.068872][T14116] team0 (unregistering): Port device ..c removed [ 624.327097][T14133] syzkaller0: entered promiscuous mode [ 624.350046][T14133] syzkaller0: entered allmulticast mode [ 624.960484][T14154] netlink: 'syz.2.2249': attribute type 2 has an invalid length. [ 625.022227][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.061416][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.819487][T14177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2254'. [ 625.957768][T14181] netlink: 'syz.2.2255': attribute type 16 has an invalid length. [ 625.985298][T14181] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2255'. [ 626.596093][T14194] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 626.631369][T14194] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 626.681813][T14194] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 626.689047][T14194] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 626.716279][T14199] netlink: 'syz.2.2263': attribute type 2 has an invalid length. [ 626.728766][T14199] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2263'. [ 626.765053][T14199] netlink: 'syz.2.2263': attribute type 27 has an invalid length. [ 626.961020][T14189] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2257'. [ 626.990219][T14189] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 627.021711][T14189] CPU: 1 PID: 14189 Comm: syz.1.2257 Not tainted syzkaller #0 [ 627.029621][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 627.040189][T14189] Call Trace: [ 627.043727][T14189] [ 627.046717][T14189] dump_stack_lvl+0x18c/0x250 [ 627.051479][T14189] ? show_regs_print_info+0x20/0x20 [ 627.056881][T14189] ? load_image+0x420/0x420 [ 627.061760][T14189] sysfs_warn_dup+0x8e/0xa0 [ 627.066375][T14189] sysfs_do_create_link_sd+0xc0/0x110 [ 627.072095][T14189] device_add_class_symlinks+0x1cf/0x240 [ 627.077824][T14189] device_add+0x507/0xc20 [ 627.082340][T14189] wiphy_register+0x1dad/0x2ae0 [ 627.087461][T14189] ? cfg80211_event_work+0x40/0x40 [ 627.093016][T14189] ? minstrel_ht_alloc+0x88a/0x990 [ 627.098400][T14189] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 627.104655][T14189] ieee80211_register_hw+0x3464/0x4250 [ 627.110682][T14189] ? ieee80211_tasklet_handler+0x20/0x20 [ 627.116561][T14189] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 627.122729][T14189] ? __debug_object_init+0xec/0x450 [ 627.128251][T14189] ? __asan_memset+0x22/0x40 [ 627.132900][T14189] ? __hrtimer_init+0x186/0x270 [ 627.137971][T14189] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 627.144182][T14189] ? mac80211_hwsim_free+0x220/0x220 [ 627.149518][T14189] ? rcu_is_watching+0x15/0xb0 [ 627.154365][T14189] ? kstrndup+0xbd/0x140 [ 627.158848][T14189] hwsim_new_radio_nl+0xdc9/0x1a90 [ 627.164198][T14189] ? mark_lock+0x94/0x320 [ 627.168996][T14189] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 627.175457][T14189] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.181659][T14189] ? lockdep_hardirqs_on+0x98/0x150 [ 627.186933][T14189] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.193262][T14189] genl_family_rcv_msg_doit+0x211/0x310 [ 627.198887][T14189] ? end_current_label_crit_section+0x170/0x170 [ 627.205220][T14189] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 627.211605][T14189] ? bpf_lsm_capable+0x9/0x10 [ 627.216475][T14189] ? security_capable+0x89/0xb0 [ 627.221485][T14189] genl_rcv_msg+0x619/0x7a0 [ 627.226038][T14189] ? genl_bind+0x360/0x360 [ 627.230683][T14189] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 627.237143][T14189] ? kasan_check_range+0xf7/0x290 [ 627.242336][T14189] netlink_rcv_skb+0x241/0x4d0 [ 627.247332][T14189] ? genl_bind+0x360/0x360 [ 627.251813][T14189] ? netlink_ack+0x1180/0x1180 [ 627.256644][T14189] ? __lock_acquire+0x7d40/0x7d40 [ 627.261803][T14189] ? net_generic+0x1e/0x240 [ 627.266535][T14189] ? down_read+0x1ac/0x2e0 [ 627.270985][T14189] genl_rcv+0x28/0x40 [ 627.275197][T14189] netlink_unicast+0x751/0x8d0 [ 627.280196][T14189] netlink_sendmsg+0x8d0/0xbf0 [ 627.285201][T14189] ? netlink_getsockopt+0x590/0x590 [ 627.290648][T14189] ? perf_trace_preemptirq_template+0xac/0x330 [ 627.296998][T14189] ? aa_sock_msg_perm+0x94/0x150 [ 627.302093][T14189] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 627.307491][T14189] ? security_socket_sendmsg+0x80/0xa0 [ 627.313189][T14189] ? netlink_getsockopt+0x590/0x590 [ 627.318453][T14189] ____sys_sendmsg+0x5ba/0x960 [ 627.323403][T14189] ? __asan_memset+0x22/0x40 [ 627.328048][T14189] ? __sys_sendmsg_sock+0x30/0x30 [ 627.333556][T14189] ? __import_iovec+0x5f2/0x850 [ 627.338469][T14189] ? import_iovec+0x73/0xa0 [ 627.343023][T14189] ___sys_sendmsg+0x2a6/0x360 [ 627.348137][T14189] ? __sys_sendmsg+0x2a0/0x2a0 [ 627.353013][T14189] __se_sys_sendmsg+0x1c2/0x2b0 [ 627.358193][T14189] ? __x64_sys_sendmsg+0x80/0x80 [ 627.363377][T14189] ? syscall_enter_from_user_mode+0x2e/0x80 [ 627.369434][T14189] do_syscall_64+0x55/0xa0 [ 627.373988][T14189] ? clear_bhb_loop+0x40/0x90 [ 627.378787][T14189] ? clear_bhb_loop+0x40/0x90 [ 627.383545][T14189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 627.389593][T14189] RIP: 0033:0x7f2481d9c819 [ 627.394232][T14189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.414208][T14189] RSP: 002b:00007f2482c40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.423237][T14189] RAX: ffffffffffffffda RBX: 00007f2482016090 RCX: 00007f2481d9c819 [ 627.431521][T14189] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 627.439647][T14189] RBP: 00007f2481e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 627.447965][T14189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.456007][T14189] R13: 00007f2482016128 R14: 00007f2482016090 R15: 00007ffcc0b195d8 [ 627.464046][T14189] [ 627.947271][ T5084] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 628.216272][T14220] netlink: 'syz.1.2268': attribute type 10 has an invalid length. [ 628.333364][T14220] team0: Device veth1_macvtap failed to register rx_handler [ 628.774378][T14226] mac80211_hwsim hwsim7 .3c: renamed from wlan1 [ 628.825642][T14232] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2272'. [ 628.888410][T14232] ksmbd: Unknown IPC event: 0, ignore. [ 629.195106][T14239] netlink: 'syz.3.2275': attribute type 3 has an invalid length. [ 629.215540][T14239] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2275'. [ 629.342131][T14245] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2277'. [ 629.359039][T14245] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2277'. [ 630.146123][T14260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.175075][T14262] netlink: 'syz.0.2281': attribute type 153 has an invalid length. [ 630.191554][T14260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.285608][T14262] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2281'. [ 633.019401][T14260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.041638][T14260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.708749][T14300] netlink: 'syz.3.2292': attribute type 15 has an invalid length. [ 633.720970][T14300] netlink: 'syz.3.2292': attribute type 7 has an invalid length. [ 634.526109][T14314] delete_channel: no stack [ 634.938695][T14330] netlink: 'syz.1.2300': attribute type 10 has an invalid length. [ 635.004519][T14330] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2300'. [ 636.303646][T14362] netlink: 'syz.0.2309': attribute type 29 has an invalid length. [ 636.379899][T14362] netlink: 'syz.0.2309': attribute type 29 has an invalid length. [ 636.590083][T14362] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 636.824104][T14367] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2310'. [ 636.894879][T14367] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2310'. [ 637.008832][T13228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 637.023133][T13228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 637.032099][T13228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 637.041939][T13228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 637.050388][T13228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 637.058739][T13228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 637.167156][ T9160] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.406458][T14384] netlink: 'syz.3.2316': attribute type 3 has an invalid length. [ 637.426979][T14384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2316'. [ 637.459067][ T9160] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.101485][T13228] Bluetooth: hci2: command tx timeout [ 640.320559][ T9160] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.372517][T14389] netlink: 'syz.2.2315': attribute type 10 has an invalid length. [ 640.399487][T14389] macvlan0: entered promiscuous mode [ 640.431663][T14389] macvlan0: entered allmulticast mode [ 640.437191][T14389] veth1_vlan: entered allmulticast mode [ 640.454311][T14389] team0: Port device macvlan0 added [ 640.831127][ T9160] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.907641][T14373] chnl_net:caif_netlink_parms(): no params data found [ 641.182696][T13228] Bluetooth: hci2: command tx timeout [ 641.347734][T14373] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.405456][T14373] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.449847][T14373] bridge_slave_0: entered allmulticast mode [ 641.473511][T14373] bridge_slave_0: entered promiscuous mode [ 641.522562][T14373] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.552070][T14373] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.559483][T14373] bridge_slave_1: entered allmulticast mode [ 641.592289][T14373] bridge_slave_1: entered promiscuous mode [ 641.809041][T14373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.830893][T14373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.019762][T14373] team0: Port device team_slave_0 added [ 642.044228][T14373] team0: Port device team_slave_1 added [ 642.142288][T14373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.149409][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.239085][T14373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.276481][T14373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.291524][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.364801][T14373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.606496][ T9160] ip6gretap0 (unregistering): left allmulticast mode [ 642.617916][ T9160] ip6gretap0 (unregistering): left promiscuous mode [ 642.636157][ T9160] : port 1(ip6gretap0) entered disabled state [ 643.002777][T14373] hsr_slave_0: entered promiscuous mode [ 643.063602][T14373] hsr_slave_1: entered promiscuous mode [ 643.100891][T14373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.124644][T14373] Cannot create hsr debugfs directory [ 643.261972][T13228] Bluetooth: hci2: command tx timeout [ 643.353365][T14466] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2331'. [ 643.381398][T14466] openvswitch: netlink: Duplicate key (type 0). [ 644.546530][T14494] netlink: 'syz.0.2337': attribute type 6 has an invalid length. [ 644.562829][T14494] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2337'. [ 644.575708][T14496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2338'. [ 644.783543][T14496] netlink: 'syz.3.2338': attribute type 29 has an invalid length. [ 645.022554][T14519] ================================================================== [ 645.030919][T14519] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 645.039065][T14519] Write of size 56 at addr ffff88801a7fed90 by task syz.2.2341/14519 [ 645.047273][T14519] [ 645.049686][T14519] CPU: 0 PID: 14519 Comm: syz.2.2341 Not tainted syzkaller #0 [ 645.057387][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.067698][T14519] Call Trace: [ 645.071035][T14519] [ 645.074212][T14519] dump_stack_lvl+0x18c/0x250 [ 645.079052][T14519] ? __lock_acquire+0x7d40/0x7d40 [ 645.084242][T14519] ? show_regs_print_info+0x20/0x20 [ 645.089689][T14519] ? load_image+0x420/0x420 [ 645.094388][T14519] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 645.099948][T14519] ? __virt_addr_valid+0x18c/0x540 [ 645.105243][T14519] ? __virt_addr_valid+0x469/0x540 [ 645.110521][T14519] print_report+0xa8/0x210 [ 645.115284][T14519] ? __bpf_get_stackid+0x6bf/0x900 [ 645.120475][T14519] kasan_report+0x117/0x150 [ 645.125227][T14519] ? __bpf_get_stackid+0x6bf/0x900 [ 645.130407][T14519] kasan_check_range+0x241/0x290 [ 645.135409][T14519] ? __bpf_get_stackid+0x6bf/0x900 [ 645.141049][T14519] __asan_memcpy+0x40/0x70 [ 645.145717][T14519] __bpf_get_stackid+0x6bf/0x900 [ 645.150815][T14519] bpf_get_stackid_pe+0x343/0x410 [ 645.156023][T14519] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 645.161789][T14519] bpf_overflow_handler+0x1fc/0x510 [ 645.167122][T14519] ? perf_prepare_header+0x1e0/0x1e0 [ 645.172529][T14519] ? bpf_overflow_handler+0xde/0x510 [ 645.177862][T14519] ? tp_perf_event_destroy+0x20/0x20 [ 645.183297][T14519] ? perf_trace_preemptirq_template+0xac/0x330 [ 645.189616][T14519] ? __perf_event_account_interrupt+0x187/0x280 [ 645.195994][T14519] __perf_event_overflow+0x447/0x630 [ 645.201596][T14519] perf_swevent_event+0x319/0x570 [ 645.206774][T14519] ? perf_tp_event+0x1520/0x1520 [ 645.211790][T14519] ___perf_sw_event+0x4a7/0x730 [ 645.216869][T14519] ? ___perf_sw_event+0x199/0x730 [ 645.222110][T14519] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 645.228745][T14519] ? __lock_acquire+0x1347/0x7d40 [ 645.233918][T14519] ? strncpy_from_user+0xff/0x2d0 [ 645.239169][T14519] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 645.245402][T14519] ? lock_chain_count+0x20/0x20 [ 645.250301][T14519] __perf_sw_event+0x139/0x270 [ 645.255112][T14519] do_user_addr_fault+0x123e/0x12c0 [ 645.260351][T14519] ? rcu_is_watching+0x15/0xb0 [ 645.265162][T14519] exc_page_fault+0x64/0x100 [ 645.269965][T14519] asm_exc_page_fault+0x26/0x30 [ 645.275049][T14519] RIP: 0010:strncpy_from_user+0xff/0x2d0 [ 645.280936][T14519] Code: 4c 89 ee e8 63 68 2a fd 49 83 fd 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 e4 4c 89 3c 24 49 89 de <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 645.300891][T14519] RSP: 0018:ffffc900037d7b50 EFLAGS: 00050246 [ 645.307270][T14519] RAX: ffffffff845cbdad RBX: ffffc900037d7c70 RCX: ffff8880489f3c00 [ 645.315287][T14519] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 645.323396][T14519] RBP: ffffc900037d7d70 R08: ffff8880489f3c00 R09: 0000000000000003 [ 645.331836][T14519] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 645.340237][T14519] R13: 000000000000007f R14: ffffc900037d7c70 R15: 0000000000000000 [ 645.348480][T14519] ? strncpy_from_user+0xdd/0x2d0 [ 645.353645][T14519] bpf_prog_load+0xcea/0x1670 [ 645.358365][T14519] ? map_freeze+0x420/0x420 [ 645.363083][T14519] ? __might_fault+0xaa/0x120 [ 645.367800][T14519] ? __might_fault+0xc6/0x120 [ 645.372682][T14519] ? __might_fault+0xaa/0x120 [ 645.377473][T14519] ? bpf_lsm_bpf+0x9/0x10 [ 645.381854][T14519] ? security_bpf+0x7e/0xa0 [ 645.386426][T14519] __sys_bpf+0x5ba/0x890 [ 645.390714][T14519] ? bpf_link_show_fdinfo+0x390/0x390 [ 645.396315][T14519] ? lock_chain_count+0x20/0x20 [ 645.401206][T14519] __x64_sys_bpf+0x7c/0x90 [ 645.405694][T14519] do_syscall_64+0x55/0xa0 [ 645.410171][T14519] ? clear_bhb_loop+0x40/0x90 [ 645.415176][T14519] ? clear_bhb_loop+0x40/0x90 [ 645.420013][T14519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.426035][T14519] RIP: 0033:0x7f73a9b9c819 [ 645.430574][T14519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.450741][T14519] RSP: 002b:00007f73aa9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 645.459317][T14519] RAX: ffffffffffffffda RBX: 00007f73a9e15fa0 RCX: 00007f73a9b9c819 [ 645.467358][T14519] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 645.475537][T14519] RBP: 00007f73a9c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 645.483629][T14519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.491734][T14519] R13: 00007f73a9e16038 R14: 00007f73a9e15fa0 R15: 00007ffe5e690348 [ 645.500033][T14519] [ 645.503357][T14519] [ 645.505717][T14519] Allocated by task 14519: [ 645.510266][T14519] kasan_set_track+0x4e/0x70 [ 645.515079][T14519] __kasan_kmalloc+0x8f/0xa0 [ 645.519817][T14519] __kmalloc_node+0xb4/0x230 [ 645.524558][T14519] bpf_map_area_alloc+0x5e/0x110 [ 645.529730][T14519] prealloc_elems_and_freelist+0x86/0x1c0 [ 645.535589][T14519] stack_map_alloc+0x33a/0x4c0 [ 645.540411][T14519] map_create+0x877/0x12f0 [ 645.544960][T14519] __sys_bpf+0x651/0x890 [ 645.549757][T14519] __x64_sys_bpf+0x7c/0x90 [ 645.554305][T14519] do_syscall_64+0x55/0xa0 [ 645.558929][T14519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.564864][T14519] [ 645.567393][T14519] Last potentially related work creation: [ 645.573137][T14519] kasan_save_stack+0x3e/0x60 [ 645.577857][T14519] __kasan_record_aux_stack+0xaf/0xc0 [ 645.583376][T14519] call_rcu+0x153/0x950 [ 645.588018][T14519] __nf_register_net_hook+0x788/0x910 [ 645.593693][T14519] nf_register_net_hook+0xb2/0x190 [ 645.598855][T14519] nf_register_net_hooks+0x44/0x1b0 [ 645.604374][T14519] brnf_device_event+0x132/0x1d0 [ 645.609687][T14519] notifier_call_chain+0x197/0x380 [ 645.614829][T14519] register_netdevice+0x16a5/0x1bb0 [ 645.620175][T14519] br_dev_newlink+0x27/0x100 [ 645.624889][T14519] rtnl_newlink+0x1542/0x20a0 [ 645.629780][T14519] rtnetlink_rcv_msg+0x869/0xfa0 [ 645.635226][T14519] netlink_rcv_skb+0x241/0x4d0 [ 645.640134][T14519] netlink_unicast+0x751/0x8d0 [ 645.645346][T14519] netlink_sendmsg+0x8d0/0xbf0 [ 645.650334][T14519] __sys_sendto+0x4a9/0x6b0 [ 645.654980][T14519] __x64_sys_sendto+0xde/0xf0 [ 645.660211][T14519] do_syscall_64+0x55/0xa0 [ 645.664830][T14519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.670844][T14519] [ 645.673188][T14519] The buggy address belongs to the object at ffff88801a7fed80 [ 645.673188][T14519] which belongs to the cache kmalloc-cg-64 of size 64 [ 645.687988][T14519] The buggy address is located 16 bytes inside of [ 645.687988][T14519] allocated 40-byte region [ffff88801a7fed80, ffff88801a7feda8) [ 645.702285][T14519] [ 645.704737][T14519] The buggy address belongs to the physical page: [ 645.711280][T14519] page:ffffea000069ff80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a7fe [ 645.721554][T14519] memcg:ffff88807aec9601 [ 645.726021][T14519] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 645.733947][T14519] page_type: 0xffffffff() [ 645.738659][T14519] raw: 00fff00000000800 ffff888017c4da00 ffffea0000902d80 dead000000000004 [ 645.747572][T14519] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807aec9601 [ 645.756477][T14519] page dumped because: kasan: bad access detected [ 645.763055][T14519] page_owner tracks the page as allocated [ 645.768992][T14519] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 7639107541, free_ts 0 [ 645.785880][T14519] post_alloc_hook+0x1c1/0x200 [ 645.790689][T14519] get_page_from_freelist+0x1951/0x19e0 [ 645.796368][T14519] __alloc_pages+0x1f0/0x460 [ 645.801116][T14519] alloc_page_interleave+0x24/0x1e0 [ 645.806555][T14519] alloc_slab_page+0x5d/0x160 [ 645.811751][T14519] new_slab+0x87/0x2d0 [ 645.815956][T14519] ___slab_alloc+0xc5d/0x12f0 [ 645.820813][T14519] __kmem_cache_alloc_node+0x19e/0x250 [ 645.826334][T14519] __kmalloc_node+0xa4/0x230 [ 645.831013][T14519] kvmalloc_node+0x70/0x180 [ 645.835713][T14519] nf_hook_entries_grow+0x27d/0x6d0 [ 645.841145][T14519] __nf_register_net_hook+0x2c9/0x910 [ 645.846650][T14519] nf_register_net_hook+0xb2/0x190 [ 645.851902][T14519] nf_register_net_hooks+0x44/0x1b0 [ 645.857230][T14519] ops_init+0x397/0x640 [ 645.861428][T14519] register_pernet_operations+0x2b3/0x610 [ 645.867564][T14519] page_owner free stack trace missing [ 645.873131][T14519] [ 645.875490][T14519] Memory state around the buggy address: [ 645.881230][T14519] ffff88801a7fec80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 645.889577][T14519] ffff88801a7fed00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 645.897670][T14519] >ffff88801a7fed80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 645.905804][T14519] ^ [ 645.911221][T14519] ffff88801a7fee00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 645.919484][T14519] ffff88801a7fee80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 645.927567][T14519] ================================================================== [ 645.936134][T14519] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 645.943696][T14519] CPU: 0 PID: 14519 Comm: syz.2.2341 Not tainted syzkaller #0 [ 645.951457][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.961937][T14519] Call Trace: [ 645.965258][T14519] [ 645.968310][T14519] dump_stack_lvl+0x18c/0x250 [ 645.973134][T14519] ? show_regs_print_info+0x20/0x20 [ 645.978668][T14519] ? load_image+0x420/0x420 [ 645.983357][T14519] panic+0x2dc/0x730 [ 645.987381][T14519] ? __lock_acquire+0x7d40/0x7d40 [ 645.992791][T14519] ? bpf_jit_dump+0xd0/0xd0 [ 645.997422][T14519] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 646.003522][T14519] ? _raw_spin_unlock+0x40/0x40 [ 646.008500][T14519] ? __bpf_get_stackid+0x6bf/0x900 [ 646.013829][T14519] check_panic_on_warn+0x84/0xa0 [ 646.019070][T14519] ? __bpf_get_stackid+0x6bf/0x900 [ 646.024531][T14519] end_report+0x6f/0x130 [ 646.028815][T14519] kasan_report+0x128/0x150 [ 646.033531][T14519] ? __bpf_get_stackid+0x6bf/0x900 [ 646.038946][T14519] kasan_check_range+0x241/0x290 [ 646.043944][T14519] ? __bpf_get_stackid+0x6bf/0x900 [ 646.049194][T14519] __asan_memcpy+0x40/0x70 [ 646.053753][T14519] __bpf_get_stackid+0x6bf/0x900 [ 646.058828][T14519] bpf_get_stackid_pe+0x343/0x410 [ 646.063982][T14519] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 646.069501][T14519] bpf_overflow_handler+0x1fc/0x510 [ 646.074871][T14519] ? perf_prepare_header+0x1e0/0x1e0 [ 646.080312][T14519] ? bpf_overflow_handler+0xde/0x510 [ 646.085835][T14519] ? tp_perf_event_destroy+0x20/0x20 [ 646.091411][T14519] ? perf_trace_preemptirq_template+0xac/0x330 [ 646.097973][T14519] ? __perf_event_account_interrupt+0x187/0x280 [ 646.104342][T14519] __perf_event_overflow+0x447/0x630 [ 646.109879][T14519] perf_swevent_event+0x319/0x570 [ 646.115007][T14519] ? perf_tp_event+0x1520/0x1520 [ 646.120190][T14519] ___perf_sw_event+0x4a7/0x730 [ 646.125222][T14519] ? ___perf_sw_event+0x199/0x730 [ 646.130469][T14519] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 646.137204][T14519] ? __lock_acquire+0x1347/0x7d40 [ 646.142463][T14519] ? strncpy_from_user+0xff/0x2d0 [ 646.147659][T14519] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 646.153718][T14519] ? lock_chain_count+0x20/0x20 [ 646.158626][T14519] __perf_sw_event+0x139/0x270 [ 646.163433][T14519] do_user_addr_fault+0x123e/0x12c0 [ 646.168695][T14519] ? rcu_is_watching+0x15/0xb0 [ 646.173586][T14519] exc_page_fault+0x64/0x100 [ 646.178239][T14519] asm_exc_page_fault+0x26/0x30 [ 646.183172][T14519] RIP: 0010:strncpy_from_user+0xff/0x2d0 [ 646.188842][T14519] Code: 4c 89 ee e8 63 68 2a fd 49 83 fd 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 e4 4c 89 3c 24 49 89 de <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 646.208569][T14519] RSP: 0018:ffffc900037d7b50 EFLAGS: 00050246 [ 646.214768][T14519] RAX: ffffffff845cbdad RBX: ffffc900037d7c70 RCX: ffff8880489f3c00 [ 646.222862][T14519] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 646.230941][T14519] RBP: ffffc900037d7d70 R08: ffff8880489f3c00 R09: 0000000000000003 [ 646.239132][T14519] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 646.247409][T14519] R13: 000000000000007f R14: ffffc900037d7c70 R15: 0000000000000000 [ 646.255710][T14519] ? strncpy_from_user+0xdd/0x2d0 [ 646.260880][T14519] bpf_prog_load+0xcea/0x1670 [ 646.265978][T14519] ? map_freeze+0x420/0x420 [ 646.270634][T14519] ? __might_fault+0xaa/0x120 [ 646.275727][T14519] ? __might_fault+0xc6/0x120 [ 646.280495][T14519] ? __might_fault+0xaa/0x120 [ 646.285379][T14519] ? bpf_lsm_bpf+0x9/0x10 [ 646.289854][T14519] ? security_bpf+0x7e/0xa0 [ 646.294662][T14519] __sys_bpf+0x5ba/0x890 [ 646.299032][T14519] ? bpf_link_show_fdinfo+0x390/0x390 [ 646.304714][T14519] ? lock_chain_count+0x20/0x20 [ 646.309603][T14519] __x64_sys_bpf+0x7c/0x90 [ 646.314049][T14519] do_syscall_64+0x55/0xa0 [ 646.318586][T14519] ? clear_bhb_loop+0x40/0x90 [ 646.323469][T14519] ? clear_bhb_loop+0x40/0x90 [ 646.328545][T14519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.334563][T14519] RIP: 0033:0x7f73a9b9c819 [ 646.339185][T14519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.360156][T14519] RSP: 002b:00007f73aa9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.368980][T14519] RAX: ffffffffffffffda RBX: 00007f73a9e15fa0 RCX: 00007f73a9b9c819 [ 646.377458][T14519] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 646.385667][T14519] RBP: 00007f73a9c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 646.394111][T14519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.402219][T14519] R13: 00007f73a9e16038 R14: 00007f73a9e15fa0 R15: 00007ffe5e690348 [ 646.411039][T14519] [ 646.414718][T14519] Kernel Offset: disabled [ 646.419388][T14519] Rebooting in 86400 seconds..