last executing test programs: 4.95972948s ago: executing program 3 (id=4349): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="7c87f9000001"], 0xfe3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000040000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000480)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) (async, rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0x12, &(0x7f0000000280)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0x4, 0x8, 0xb, 0x5a, 0x10}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xecbb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0xb, 0x7, 0x9, 0x6, 0xfb01}, @jmp={0x5, 0x1, 0xc, 0x8, 0x4, 0x4, 0x8}, @alu={0x4, 0x1, 0x3, 0x5, 0x1, 0xffffffffffffffe0, 0x10}], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', r3, @lirc_mode2=0x10, r4, 0x8, &(0x7f00000007c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xb, 0x5, 0x8b7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[r5, r6, 0x1, r7, r8, r9], 0x0, 0x10, 0x2d1c78c0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000e00)={&(0x7f00000000c0)="2c91c85c4bc5b7a86dde54b3efe7b1279a1aa393032094ecbccab557", &(0x7f0000000bc0)=""/216, &(0x7f0000000cc0)="e5fd4926a5cb8ad4e2b491aabe84cd017dd1e2217909e6a253", &(0x7f0000000d00)="7c8a27ec3be3b9bdaf489272e5754b45f55d118070ae857cb8dfb9963e84", 0x8, r11}, 0x38) (async) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) 4.040562379s ago: executing program 3 (id=4353): r0 = socket$kcm(0x2b, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x24008000) 3.875591648s ago: executing program 3 (id=4357): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) (fail_nth: 2) 3.475968533s ago: executing program 3 (id=4360): bpf$TOKEN_CREATE(0x24, &(0x7f0000001900), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x1, 0x50}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000180)=@phonet={0x23, 0x7f, 0x81, 0x2}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000200)="204b9ac165488020655fec12cce49e1c7f2747c9558da292029735481308697f6c58c1cf08ac408b47619a1993332aca7aa4902a91ca1eed946a070982e48c9cf1a45ba2ad2fe13167306b044623db9a8101c41ba6015c31e28edd1d8e30d8b4510bd452a91555ae2c772cdf18d96049a10b1135a300474470fb47af6d74aed3e1a44ef47e448a3ea8cd8557c73546d3ba6c9a20132c7c9b2be7543798f1e1f442eac2c8999fc4a75bf49d6c940dd83a40c631b846594aa4f4d03d395b3c885deaa8ab5bec69ef445424e34880ad913ef5bd172b0f16aba138da3ecd9e256edd283a0f301d3b1e1d342d23ae85e64795d542106188", 0xf5}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="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", 0xfc}, {&(0x7f0000001400)="ed73e4e1fa52d46ed2b675f10c9a1b0a3da98636a49da7cceed98cfc478937a9c7b76694a52af624e1c69ea66967f8dd17306b140d64c71dac7f6c1cb26f0cbf244ae85039b75492d395e3de1e7d4918773fba3286bbcf6dca5ab4bfc8a4c42c99bb106b2ea8cc4b120ca49b6faaf96bf0fe2d9e633301336e8c426352f7f71813f6f1ab5907dde68bb730e9f60d29f25efd9258e23372267969c7248180086a3ddb41a0efcb0afe1bf3d32ec5ca3f51ea7586a05a126f3b360ad644d037517350d97b441b88a0f6702a1a475023fd17461ce4ca79f35dd4", 0xd8}, {&(0x7f0000001500)="95addc1b07c9d9d514f89c9e798d120627234af5fd1fb6371d7bbfcfd835df5b801eacef51615335d0bec1753d5481ced29c539f38a6a9f07ed87e50d5f70a90c4031b5d442c0bf5ae5cdae2d8171d89e19f35414c506bd0ed3a0e81086bb97ab9017a52a067a6beb309c82bed1c1ad03a1de486246e906d0c8b7a4327f11c8420e27f134523131662ada108fce370ebc66e818404aae9295d", 0x99}, {&(0x7f00000015c0)="138eeceaf8e7b4b516b79b5b24469fd58039652ffdf36ce5321cfd664827052349325f7828205e43d83f02ba5ee2301ace8f65ed6d7d43fd75667af23bf9b0c34fc719d51225b1", 0x47}, {&(0x7f0000001640)="b4a2051755e65d8c145fae53ba28fdbfff3b935e10c1f94fdcd421ac8e52227bff7587566934c754b38ab03bbaee1e6f090f8ceab923ddc43635c90a67c046dc058375ebe7523ba920c14037ccf55b2d69d741d3f7c5af2c896c39b23e56d1a26f7591e6a33e4a761b", 0x69}, {&(0x7f00000016c0)="fb4b5038de096e12b34453feed9fc6a1e3f29020a73c9735654c9f93266d8c27843f645e546447070b52682593be9812c8bd74975271685e60e915de670d90bafe8950eeaa4abbff546ef7d5706d324fa52a4cbc107dce886ecd28da2d935360e092cc4722af69890dbd82ffa582e26d002b0a7d054d9fff7b98f7de163e", 0x7e}], 0x8, &(0x7f00000017c0)=[{0xf8, 0x109, 0x1, "294424b5124170973176e521e4c6fcd55c6bb545bc1f1d4d0c96520638188955eacf78b2a64ad33bf3b0ab949b3cf74db080c5ca2fd581b0200d5758bbc88fae301cd70c3144252cf9b0a9ff58f5b73ed09765fa934ab9aabc62a6de885b2388457f65917788404634a9adf2c973ee35da47d0bc5db0559ced873aef844377375910b0f3ba9a0215290ef3020ab02dd1650515c21196e0124657c5b757043d817feea68c3916d5a0b8932522097c49a7eaf3665becb101631e87d04ae6af36e1206f2b11ab1742b65ce458a695e22d85145e510c6791f27bb78cfdb7dd0a7739e155e695ce"}], 0xf8}, 0x40001) 3.422720556s ago: executing program 3 (id=4362): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2.710457745s ago: executing program 3 (id=4365): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000200)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r2, &(0x7f0000000380)="4bf2a9cb2e1260d60a68deeb6bc9faaefa77d73ad9afd9da5de518f1e22d6f32578c0871230c10aa5ccaf9ccde86f7a11d7e84d35cb829edb4d4154c7e5e641f98e17ace7b3ab13386c7d9d87cf036fe53cd4c", &(0x7f0000000400)=""/127, 0x4}, 0x20) r3 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1, 0x7, 0x8, 0x1, 0x0, 0x1b1, 0x4200, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0xa, 0x6}, 0x10c808, 0x71, 0x1000, 0x4, 0xe, 0x8, 0x8, 0x0, 0xffffd5a2, 0x0, 0x10000}, 0x0, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x9, r3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) (async) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000500), 0x0}, 0x20) 1.699712435s ago: executing program 0 (id=4370): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x28, 0x98, 0x9, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) (async) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="ab985a5482c6abd36f4a447610debf76dbe2", @ANYRESOCT], 0x0, 0x7, 0x0, 0x0, 0x41100}, 0x94) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000050000000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 952.883183ms ago: executing program 1 (id=4371): perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x4, 0xa, 0x6a, 0xfa, 0x0, 0x4804ca8b, 0x40218, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x778, 0x400}, 0x4020, 0x1, 0x4c8, 0x5, 0x9e3, 0x2c8, 0xcc1, 0x0, 0x7, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x7, 0xfeffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x1, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c80)={r1, 0x0, 0x2a, 0x1000, &(0x7f00000000c0)="b315aed9cd6170c386205149e8f3f3cebd9f0a6894a484dd83a4450d2d1799aaa0e80e3a465139a1b92d", &(0x7f0000000b00)=""/4096, 0x9, 0x0, 0xd8, 0x4a, &(0x7f0000001b00)="30ab3207ca1364c53cc2de25297cdf7175465d729ddaef658ea5564fc58d10bd2893094f2177564a33c13a2d94642386af33ec7d61a34040b91c546aa97d461cd2c4e086a7fa23b6ca80300e4703c9b516adc3ebc53f3c47fd59247607be3065e14cd03ed18544d0bf3b2184a898c48ab6a585e1c49a8ad7ebbe251582497a4c9fb05b2ced281bb84f2dffb58795e609d912fab81f75d7ed8405862449e104a1f8cc97f973dd1d70fe423ebeb56beffa753b2f41e1f53a02b5807c992ed08d4c7cbdb632b14823b4c90d39628ecb1d7f981a70f7c5d0bd06", &(0x7f0000001c00)="c4fb0c5fd64cb0ef7ae8b566da5de39a5e995c4c8681eea196d537febed2219944446361b39c70e2eeec2e9e6eb9a7881e6152b3c1985d167c58b143d0a6c0f74a1f677e396c98dc01e9", 0x3, 0x0, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES8=0x0, @ANYBLOB="79826d17b6308324ef13c4584c707caeadf1b4404eb9018b5134de2358e59fc606f3a8b00352ca2b3a432c507fe965004c023fe566e258c21a6ca3c8316a763825b85a5520a8a8cf4d407e23f1073483a4d7c3ba057c65991d9504e4aa0798c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) 879.87493ms ago: executing program 0 (id=4372): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000020000004404a60007036f001c"], 0x38}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4c800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x462}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0xb1, &(0x7f00000001c0)=""/177, 0x0, 0x4, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x9, 0xffffdcca, 0x1}, 0x10, 0x22f4, 0xffffffffffffffff, 0x7, &(0x7f0000000380)=[r2, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x1, 0x4, 0x4}, {0x0, 0x4, 0xa, 0x7}, {0x5, 0x5, 0xf, 0x3}, {0x0, 0x3, 0xd, 0x4}, {0x5, 0x4, 0x5, 0x9}, {0x3, 0x3, 0x1, 0x9}, {0x5, 0x1, 0x8, 0x8}], 0x10, 0x3ff}, 0x94) socket$kcm(0x29, 0x0, 0x0) 858.778725ms ago: executing program 1 (id=4373): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 806.111308ms ago: executing program 2 (id=4374): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000680)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2}, 0x4) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000006000000ff0300007f00000020000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000050000000d000000000000080000000000000000"], 0x50) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="0404000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x18, 0x7, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000009000000000000f300feffff181b0010", @ANYRES32, @ANYBLOB="0000000000000000180000006600000000000000001000009500000000000000"], 0x0, 0x5, 0x1000, &(0x7f0000001980)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001880)={0x8, 0x9, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002b00)=[0xffffffffffffffff, r3, r4], &(0x7f0000002b40), 0x10, 0xca8}, 0x94) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x646b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f0000000180)}, 0x0, 0x32, 0x43a1bd7e, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8807a158983", 0xb}, {&(0x7f0000000040)="df3b46a1330000000000", 0xa}], 0x4}, 0x40000) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000400)={'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_clone(0x6a220a00, &(0x7f0000000200)="13cbbed83ddabe183be280b41d4ca0cb5941a39e86644e2fd339f27a663f636b13d054d9bfa8ddc63a4f2b73ab3d1d5e4876d1349079d6b3ee07b2eb97d79740fcfc4337eafbed519875265fb7ff8f8b55bf24e8438366b1e68b6e43875acf95ba34568438a75f6077948bbf9709dd38fb48d2cf33deaa86753b095a60dd48d01726a037b2b62fe4b8044ba00a51c18eee5597f7cd30cfa37c0b6bedae6d5364fab3ad269944ddc0f6ac6067ae61d405d4a42b1c3a7ec197176614eff9a71baef61fcfa95bb4e761be15b63cbffde426f1551afc7f2a070e330cd32beaefa2516c6f8c20", 0xe4, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000300)="0f1000bf5fe7407984b030db35e0e3c345a445b0b38b3894225414da0fa3ae43dc45a28c81f63a2da75d558a975b711ded2cfeb6f0e7c07d948f7c3053b4169996d76b3aeca97e48f7814e8436f9440f9d4484c4d711bad9cdea4cf73bcf736a377f06eb8eafa5296b20b3da1ed235d2d146c95b02d4e282cd555888bf6757c82857bc03679551ca6ef88f60aeadf54877ab889f43bd73fa2e175ec5db50e62a019f08614cc57f8cb28c55b8c52904") (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x15cb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eca, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x30000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 747.829882ms ago: executing program 0 (id=4375): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="092000000000000085000000c00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 637.913808ms ago: executing program 1 (id=4376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)="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", 0x81c}], 0x1}, 0x20000) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 568.067674ms ago: executing program 2 (id=4377): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0x58, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001180)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001280)={{0x1, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)='%ps \x00'}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x16}, @generic={0xfc, 0xb, 0x2, 0x6, 0x8}, @alu={0x7, 0x1, 0x7, 0x4, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f00000000c0)=""/4096, 0x40f00, 0xc, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000011c0)={0x3, 0xd, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r2], 0x0, 0x10, 0x9}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000023c0)={r1, &(0x7f00000013c0)="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"}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002500)={@map=r2, 0xe, 0x0, 0x7, &(0x7f0000002400)=[0x0], 0x1, 0x0, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002580)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002540)={@cgroup=r1, r1, 0x10, 0x2010, r3, @value=r6, @void, @void, @void, r5}, 0x20) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002700)={r1, 0x0, 0x70, 0x0, &(0x7f00000025c0)="032e2dc28d87741e83baac0b2ff2d956454c5774374919e35d950bf621d5e509381f0afd6b275353fd25e0e123c3356cbece155c38d305d7169a6ba6bcca4a104a978a87cbe1e70df820af94e3598e8c1396991dd66a0a24b2075492abfb7d651a99d2048e1f1930df8268e80ca63f63", 0x0, 0x7ff, 0x0, 0x88, 0x0, &(0x7f0000002640)="dc8ff9b1d4b3423daba727e4ef9be7674d1d22a4d88da22922771a437902896028a84038138c7ca35c68254ac004e01be8f0dc227fd6b97897cd49d18c1d2af26a1c87b40f190a2d88a9e69efc3d3b8eff103cb50e50d77c0a923ef5e200e6c1cac06c8b9dd027e588110cb42616ff6b76a7b01b382629c999ac0552f9c1fa7d8130d6f68ca724bc", 0x0, 0x2, 0x0, 0x6}, 0x50) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000027c0)=@o_path={&(0x7f0000002780)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003980)={&(0x7f0000002800)="ca1390cb93b46553ab4cff8c668bf49b349599a4aea967c517d56013ad8340c5dc3cf21a56b2d3d30c2536bdc6065e487bdc0d8440686c21add0e90a693cd476c7c982db7e0bcb9d64d7daf337b4fd39d1f66defe38577912c06165050ceeb89183cc221e5b9b83b3d2ff3ad291222aebf8934242606592f233eac9b4b556345940b2e1d31078f4e86b261145cd9a9380c6909512b0f704b5100f5d162f9dd153fb4647f0b1a", &(0x7f00000028c0)=""/4096, &(0x7f00000038c0)="b6753e0add682b07c803dcdc7fd508a9522cd98feae57abeffabe0bb51a5e28c997ee5d9", &(0x7f0000003900)="8314faae4dba6ef6159c42588fb2d4045b66ff7d9e23ec73426e29edc92b954f4869088d1a7c3bfe304a57a1f7413f3eaa39bf12eff089078c5c1b2871ec87c38948ad0efc4821403ed616582523137da2a3", 0x6c, r2, 0x4}, 0x38) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000039c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r9 = socket$kcm(0x29, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000003a00), 0xc0000, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000003a40)=@bloom_filter={0x1e, 0x5, 0x7c20, 0x9, 0x10c0, 0xffffffffffffffff, 0x80000000, '\x00', r0, r1, 0x2, 0x4, 0x4, 0xb}, 0x50) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003cc0)=0xffffffffffffffff, 0x4) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003f00)={0x18, 0x12, &(0x7f0000003d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x1, 0x1, 0x0, 0xb, 0x3, 0x18, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003e00)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41100, 0x8, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000003e40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003e80)={0x0, 0x0, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003ec0)=[{0x5, 0x2, 0xa, 0x8}]}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000004040)={0x11, 0x1a, &(0x7f0000003ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@generic={0x6, 0xd, 0x5, 0x400}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x0, 0x1, 0x0, 0xa, 0x1, 0xc, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x9, 0x2, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @alu={0x4, 0x1, 0xa, 0x0, 0xb, 0x8, 0xffffffffffffffff}, @generic={0x9, 0x0, 0x1, 0x2, 0x323754aa}, @map_fd={0x18, 0x4, 0x1, 0x0, r7}, @ldst={0x0, 0x2, 0x0, 0x6, 0x7, 0x10}]}, &(0x7f0000003bc0)='syzkaller\x00', 0xfff, 0x84, &(0x7f0000003c00)=""/132, 0x41000, 0x41, '\x00', 0x0, @fallback=0x3, r11, 0x8, &(0x7f0000003d00)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r12, 0x4, &(0x7f0000003fc0)=[r1, r7], &(0x7f0000004000)=[{0x5, 0x3, 0xd, 0x1c}, {0x1, 0x5, 0x5, 0x9}, {0x5, 0x1, 0xb, 0x3}, {0x3, 0x1, 0x4, 0x7}], 0x10, 0x5}, 0x94) (async) r14 = openat$cgroup_devices(r8, &(0x7f0000004100)='devices.deny\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000004140)={r6, r13}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004180)={r1, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000045c0)={&(0x7f00000044c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@volatile={0xb, 0x0, 0x0, 0x9, 0x2}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @fwd={0x9}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0xc, 0x1}, {0x1, 0x3}, {0x4, 0x1}, {0x3, 0x3}, {0xc, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000004540)=""/69, 0x7b, 0x45, 0x0, 0xde}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004640)={0x18, 0x31, &(0x7f00000041c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @generic={0x1, 0x8, 0xf, 0xf6c7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @alu={0x7, 0x1, 0xb, 0x3, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004380)='GPL\x00', 0xfff, 0xfb, &(0x7f00000043c0)=""/251, 0x41100, 0x25, '\x00', r0, 0x0, r16, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004600), 0x10, 0x1ff}, 0x94) socketpair(0x2a, 0x800, 0xffff, &(0x7f0000004700)) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000048c0)={r11, 0x20, &(0x7f0000004880)={&(0x7f0000004740)=""/156, 0x9c, 0x0, &(0x7f0000004800)=""/74, 0x4a}}, 0x10) write$cgroup_devices(r14, &(0x7f0000004900)={'c', ' *:* ', 'r\x00'}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004940)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004ac0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000004a80)={@fallback=r17, 0x0, 0x0, 0x9, &(0x7f0000004980)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000049c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004a00)=[0x0], &(0x7f0000004a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$inet(r18, &(0x7f0000005000)={&(0x7f0000004b00)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000004e40)=[{&(0x7f0000004b40)="60d0da73bcabb43888f30f89ae742bb9cd5dc6976e84b10f6189e984a72edde18b9a57f13e1b703853f7161c1283de9a5b3e593798f3477bdc7ad19598e042ed41c808502f87df5d34c1359c44f50591293fef714e4e0b56ed1ead0eb09381a78c21abfe3b9116c2f8f753083ce5204685d58f712691440f05a9772aad4b983a4857f95529be879628358f65228a8b873a4ff20c5d8f4958fa245c430158fd14320ee7a958124080ae1d98ff95a0060d6150a278bd80864cb7d6f570489c", 0xbe}, {&(0x7f0000004c00)="d04c0f1a29ce49db7db43a2033355feb491ff73ab1537ee1f0f7888b820431fefb971ea67e8fac29aaae38c195e0ae4b2f67f17815797e08d36de9d8cfa989ca6c4360b92bfd1556bfb446d480358f5f9bf26cf2b679a057820e2cd2dadf6e48a28f121010ef2a050af21515316709c8604329755b659b46e1479f7646a587c69bdeec1c247bb445db5019d88c8c271d3678749dac52205db61d418a", 0x9c}, {&(0x7f0000004cc0)="2dc17b6d7b5031cf2a1055be3230c347858848468b01c4a76f3bf079cce2716af152350ff0bcfc62411e7c994e1d07598cbabc5464fa21ece799ee11621eed76dcb695c7ce01ae9675ccd64f679a384a78b493eec6d8cee0cf353b5b5013f45247050f7ab61f2cfdd7977f60c9490fe8f206a377174739220268f1afecdf65d339c68e792f8d658115b1dbb0638a1487bf", 0x91}, {&(0x7f0000004d80)="12bbc9744df3a38ffae651a37cb272483b9d95cb7bf76ceda1a88d8706a7067dd07092d101df9c2e0a9914f750d0e8203fecc4ad", 0x34}, {&(0x7f0000004dc0)="ccd5fe8f283f9defd52e657a24dd858e04834ce3fc4554de5ed3664ebda4e34addcdf292730db7547d442a4b558f888e7228934becf7f7aa351f51e4db136c3fcbb6b63b0feff359e9f12c6092581495fdec0f124ee2dd798661fb", 0x5b}], 0x5, &(0x7f0000004ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xa2, [@local, @multicast1, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0xad, 0x1, 0x1, [{@rand_addr=0x64010100, 0x3}, {@private=0xa010102}, {@remote, 0x3}, {@broadcast, 0xe2f}, {@private=0xa010100, 0x101}, {@multicast1, 0x7}]}, @rr={0x7, 0x23, 0x40, [@dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @remote, @private=0xa010100, @remote, @private=0xa010101]}, @ssrr={0x89, 0x1f, 0x18, [@dev={0xac, 0x14, 0x14, 0xc}, @multicast2, @broadcast, @multicast2, @empty, @multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x2d, 0x2, [{0x6, 0x2}, {0x6, 0x9, "3fa11444ce63f2"}, {0x6, 0x6, "eb99f23c"}, {0x0, 0x8, "84b17e0669fa"}, {0x2, 0xe, "2f5419daaf2606eee2c79780"}]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x82, 0x12, "37a6f27ded7db42c2b8ba206b8277e9a"}]}}}], 0x138}, 0x40040) 520.102366ms ago: executing program 0 (id=4378): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x4, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {0x0, 0x0, 0x0, 0x7}, {0xffff, 0x0, 0x6}, {0x8000}, {0x5}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x420008}]}) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x3, 0x10200000, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 419.80301ms ago: executing program 1 (id=4379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg(r1, &(0x7f00000005c0)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd7}, 0x80, 0x0}, 0x4000010) close(r0) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"}) 419.20806ms ago: executing program 2 (id=4380): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x7, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180045010000400", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x7, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r1}, 0x94) (async) socket$kcm(0xa, 0x2, 0x73) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180045010000400", 0x33fe0}], 0x1}, 0x0) (async) 322.968743ms ago: executing program 2 (id=4381): perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0xf9, 0xd, 0x9, 0x8, 0x0, 0x7e, 0xa802, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0x0, 0xfff}, 0x0, 0x3, 0x7, 0x0, 0x0, 0x3, 0x2, 0x0, 0xa, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xe, &(0x7f0000000140)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe1d2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 301.116628ms ago: executing program 1 (id=4382): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x7d, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000009", @ANYRES64=r0], 0x48) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x20, 0xe0, 0x3, 0x0, 0x1ff, 0x1e60d, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp, 0x12101, 0x1ff, 0x3, 0x5, 0x10, 0x7fffffff, 0xd1, 0x0, 0x6454, 0x0, 0x1}, 0x0, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe47, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x3) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r5, 0x0, 0x7e, 0xa, &(0x7f0000000280)="9d459ab251e9796a59ffd26719960ce17b9db310f97710fb782792e5ce3be57ceea20342ba476b6d6ae2c944cad81a2536d7254a5236acd75a8e97fd4611dabb0c6c0373da3fff381577a04f8c5b02f35ab97366630fede2c41ba022fbfca87a2faa4a43b128cbf6e8accae6202c3791a8cc1b63fb5a5051d478201ce277", &(0x7f0000000340)=""/10, 0x2, 0x0, 0x1000, 0xee, &(0x7f0000000680)="38ad2a2f833a2c82747d48ecfb7ce8104bf076fd8427b9a5da3e60dbb17caafe527ecfaac6fb939ab4fab51ae8cb9e0ef2a00c9561640b94c03e06d3552ed533d58d582de855c1dd95f846fef920e1de7a7e2a6a950c0f5f9942e3623b078869be4661186d405c02e224fa3e259768d73e8317ad74582bf8b2e8dbd1141c57c7dad8b3b952055354949a2a9c5ccc3d0dd00c321ade2cb0d9e56f949b5228e0f69f0bd3997573aae9bb796c7fa1ca1d0e7cec795061316f7dc2ca0a2f797504ff4be94baeb726c265714671b786c7aed6dc3e785e2ab936e8d35cc317a9a305e52ebd7510df60421128ed12760c40039b349cc57ef031b2d1125050cad8ef901d7fc2ac1913f199d6510da7c9f917c701f9ad4d71cce5d2166ec7c008888ab3fbc2837ece067140c65dee4c364629984b993bf072536421418e9268646b8675e9fceea120749761f9014cac7608e54d1ac41c84bf6ddc992aa38f70f45dc2a4a14344697182f658647acf0c8a80fa45c4353bbf80ac7fa5bd01b74089ddc3983b85d19ac2eb173a5d3d6e430802b9b9bed4f2ea1c1fcb4a4833f9b9fda0d78c31048a88be90fb2935ea085281d0796741f136456f14fac3fd1388cbb4afcf91d9bc96fef39cdaa78b5f9d5a3f705ebf168f9a0933eaa1a560aa0cf8c2a0ff3207d5afa591f5379bb286876dbd8eba9f7e0dc1a3444bc5dd31b32b30cdbd77ae6e7efee08f560a56e8a9389aa30085c6ebac16bff32bedada64354818109f84fdd7899fddaccced92ccfe22e2318756c781662a67acbaeec7071a732fd5e112080f86422109e8bf6c90ea9f563bfbcd84a621c0b8498f4e36c1ebc94d150cffb86c8ef4c08fa9a5f0da7eb7b6b7045d3ef91b942ed993c9b33a2daaabd062af8984304e5857c40195ab8b7d129547cd18adc9266fb27f6acfb9b44429936d8ec8e4b2d1fd372e0a9df417af7b21d81b507b02ff51ecaa05bc277ce6a8d8858e22688534fb2af70fca6210dc6f14c17a6cf5dd443734bc7d25a743a6e6f5bc7269aee42545c393ef63afad5a8558ede0c031408c983bda51081211b23bfe66fb13e8ae05b19b7f6af98aa20abd297db852a5af74f42c0c68818b3b3671419058412d4f8c4761aed521eedb40c0749b7cf2c1bf0f8289403b7ac8993f9d8c71e5b9b368c7285da0dc0145e841d3e3e62ad551cbde21241515d081a5f73ce5250da570c0f361e7632cb347ac6868de817d1f433166019edccb0cdd568f403f6244195731088485fda03f821ef10f0e79f7692d4337739ea9d82a7ec201b3db0c965cd797eb3db9288f0ad4748bb4b7e84f2b0abd0ec8daf0b0a4c6fb16e5475c222f84b19a178142305d5928458eb88ce1d176148d3fb31542dfe5d6296a3b4e4532ca1f7962f8a862410c9b74371281585fb8cd95f732783872933b3d2482c1b10118d9cc75a7fe7dbfa89739cf3384db1a375cf4f6f137af3c22076d45ba129b542c159ebeb1c6851e7b50ef2d772d81b13adde2baf18bf4efd2ae576ad067cbfa5dbc082ed5f2fb53e34f6518892669d685ddad0be4bb73f74408f51dbb5ecd02b53fd4c391d973a0640b4027353193b866ecc03610c23d80e89fb488f8638f54a8d31f12de8c6f980b0038c0d79639d57f8198a53f74b4a74a053ec6f02071f6ef6f64416c5e0679051e283daf98914c8ea84034bd076f50f6adb190b1a790abba0f8d8e6270e19b238eb1ddf9a48b2b4b28e073ab4af56a7b03d415f158067611c46ce503c4bafe6b52f8ceb1f856f30be07f2bd253782c0540b517a4914a4d128acacd153d062c9a42b66efcae222c04082bb91fadaa953c9f401254c1b7339f6c482ffdf102015d0e667217348f9121605cc37b2eec2c522247d4e9f99720a56013b64ee0ef948d2d23b058b137fd3ada54440936fb0d65957b638f744a52749b8f387b4fa50ea94ec61e9b73b172b22a23f0dffa5b0eebaa8c91b78d82c107f33431d4f5e42c5c3950391475664103b855985309f738314a9db532bd5fed4e46b9f6561b860a9f8be912ad1af5c3c2cd909866722e981f0c4b0d62bd3e121d720a3797d9baa6fd6f0690223ec6d3ed10011c6b3d8dcee1b2cef1304dbde25c53bd66614b7a87796c12d28ff8b133b959480b8eebef29b07d16c3db58553e8ae71e3854616e4c9081056cfff3cc54fa114395cdc5e1dd17b127fdbb1eddb6ed9e1facfb5ffb03cd721df89f46a33d482c9c0b4540d0e7e78668a1c05c6749a0aad3457bed7ff8b7d6695a6632494fee3b57462e876372dfca41b68209b240c7074ffc4276e6a3a4af64bef85a8e71bf799270702a8bd7061694702126c7ed8840d8e5b76508c66fcac803cf493ecd9efabe35bdd9d5b6cab3a420a0e06fb40d1bd73b9b4e5dea87965326dbac93e5caeb429ea1da12ca03849994717a2dab0397912261ea2292a36f23804ef665a50edda82af9d55aa346b1e7ff03b1836fb70c22df98dac598cf1a7396876a133d73f4f8fceb25f2b48cb8331302f1ffa0a32d9aa4599554f447d8aac65c6c94d3d6db1bdb3fc3b264fa5221b71490af765477afb606af61155bc98f21a2464a28efce01cae7f0ba761791881f40a5bcb4f1b501afcff03f4c3ad0552a9a275f633a1fc6b5a8e40975397cfe0dfba07f6bcaa9087c8334a3fdc586294e64a435c648f2b06fa9ed1c2332e4b1b970af9e2dde07998071723bd8d57c98aba4b0b7f95de5144404a3916af8a7afa1fd5669e43db2a10d269d7e62e3fe63fce1d8dd9a9e515fd062965bc3700309d2ab160f08714a23cdee56d8bc08d993251832ecdfc53788711cbce90e3d2ff0eb1dc1b76da8330f8d10edf1b6dca6eafc6479f287181ca485e98012f6d36ccfb653e75751743deb4f186120823075dae03df8c5b27e33b5f126882d63f092d61d739a7ea245e102b3a4fa7abfc3f0f253e5db749c9665940ae3946e42c81abacf6f6038967c9d247306527833e22a74180801d9760e39b0808bbf29efb941942072ef55ea5a58582b1717309a064ed9fe01b7f5798d1e4ec6327501bbbeed83d46d325b136468afabbf94f0d99550ed510013dce64a7a12eed1526a136f4e1e58f81c0a5894312a8031849c5941520205d44696581f9508cf848a104e2d25b4e606a419a491ee5d92575939f072e4b1f23d3997be8213ca93e86a2ddec29d49c45bd0107510ae1d4fd6258348d90523c0345c9f56585678cd56f6a4cc6a70c78bdcd42e0f92ef483fd4476a9a9d3683ab52e7cd124cc6cc9d192b3b3406da0a5c6a5b93c95a0f5627db491ad0d324132513d93f7d8ffe1bfc890fadb161abfff605694b2b98c9452ce5b92d3d6d3bb14229829dac8b659a1f99091704fc254d7719f7b28ca398de1a15d0a361c86407f08d07b33cb5762387eed97c2afc37f5fe8eb13e49f12cc45575a38a5d853e1f262aa75b3ad1662387ac7a1b087b2d703df6bcd8deab4c19e2df00ae94f3b468a870578f34786ae6d3743b09d5c63f6ffda653a2610128019c042887d5c44664198a3c6a62a7525df78f637c7ce534ae32a1db6765c62b944c162442f35b5b38fe7503d97e5a34f221e367807bf078a72116ae30cd18f9539f5ac55988bace7db954ba6ecc60f2cfbac6201aeaad97093ec161f03e6c6084aae3e1d7440daa0f128f472b68f0e28062d4b45757f0c41f20f6cb46d7b09f7b3cea8ab68a585ca8546007f053484d4f2ebcf8bff09a3cf2152980e411da76b4a280c98b577ac7057b7fdfba20b0699a04924344a3f4ae717b8b0bba092dc829c8825999302bee8bebd9f34dc4af8537b7e9d3e65278400d7e96533dc7d805e939ea14ae0d32ef35883fd032d7085bdca59208f057e697d4db97d631d99cc0960deab4c50014a02d61b5abcd2f8f4ffe440105e436c3582ac15be54fdecb470e0d9c804d01ddc285ae568eb1a1efd90a75ae7037a24169a4310a7f6c6daf84b523a67fb0d1ddf28e8b67bcf6506211c8e8297b0376ae7fb4746d7e5f00aabe95271400108ddf6f9946686920824227046d1511c0a9d1576e6af2afcc4c171e225698680d205d2494438d86219f3e295cc2238f47110b2fd885389e079342907d137627934d272dd8450cf6a320d8a703cdcdbbfd922185236fc703a914301681654dbd1417c817c38554ca8939f739c4b2d8301afadc1bd48155152ee69de4a21d610711439e39822701240fc93d621582330129aa2270664f8ff25cd66fe665f276456ab8cbfe8861e34b02f75fb05874e756efc1380a9ebc12e3f5ce5c439563e78b637974d28e4568b7202144fedeaa87b788c83f5df08c5b2f5d5cfdf9bbe9764d153b56aa12249899b3d4d89668395ea04587113df024ef0a2e077863adcd10a140d7cd12894eb0d7d0f652f8b6249a808cf5c27d924b11cfcee6ade6631a8158151bf51a45e36edc2e2671193015ce28e3fd990445aae1be533a9891c8a7978d07f1ef78d93d3f975a6886125b4343810230e4305ca9b6fd250f816d51f7bfa4f00b3c30a7a2b6f27ca9f6b0896629950514ebe748ba509ba239c97266af3d8eba63577470448945787723ed135f1610f7ab70804ebbb7e545ea4fe214965bce58a46127ebd62f4a231d3009eb0835cae96f573d7a136dad5430bf8988eade70970bafb3f678bf60b8a543940b7f47cdddebb972511498a68f08272e28c8cf35b4cbb764d6305c9df665b8da9f4de276a4fbc33b85a9faca7340956e9452fe23a05a373e9fa5d0ac39ad4776a7aed304d8142fe7d3e52400a6ac3d510652a4e7925ac8481bf8c9d371aebfb86c119ac8fa5685a95b5052cb39cdbb363cd6858efab1f0178fbd67e80eb55c6179e2129af3b66193fd46bb8ea805272b396f43641ed1908d76b512d77f772695ca6709804ed152aa9baa52733e93b8291711ce36c56239702ac640823ae06326449a2e84afb5833ff9a8d280e8bb07a1008976a96e2ed958c54ba25b062e8143bfe25259508a398497b2e9c85e5323c17f38b559d2b1771ac2ceedf6e75b6a744c511ae97b631774454b8dee475699e5b16c8659116c154ba95248a87fbc7a4ca06bc9e8dfd73c1db46622b974665c2ecd15935d2f60fa5b9d78f4fdc1c300fde37ba9dde4e864d5fab299c66a95f0ecda8f3a367e4ce6be2d4c9c5421eb9b1c0b8e0a3dafc1b8b8d4771827306fa87b91d25ea004510097cdf3ea16a01254137f9b86db060befe04c6eb785ef8718fa2e8a936372c0c8fae2be1e8c850b0ded4fd3efc069e15f32c89884d1be2d6d99a05bcf1e9c43fba88e0a7670a9bface84ed53aa2245e668f2b0c7493bcd3723bcddc1736868f3e6c6d39403cf97edd62e4441a88ea425f36028c48d75a978be34b7f8742549cbad1374eb566725513ad2798ddca6ece98bfd5236a9020b0cdd11389dfc55cc2e797c8ce90f6557b33ad44c78d8e0481fc63f751378e82bfae8ee30c2a129d310f27f3d3a055d6a460472702d07cbc869e647f0b16492e715c89d8b1fc30d984ac6b4eba13526bbe29fc6c225d182227bf47c2c5e31b5c5909c3d4cab3cef957268ef921051e8ce94a47c98458f39bc78c9631b8ce5d673570f8666dcf37353d4a8f961d1af13336fdc0a8f19f6b77a2a89cd016beb538c25c044ff4bb722b22296b2b826bf6807de5c9ab3b24b96511ed5708d0c5b04e54e5d9cec45435642475f63c82e483590934fc1de0771aece8232ba328c7e842209a16c227a8396a7adfd5fb1553c85e812d565a44ffd623b737568b99c1f3fa3a8", &(0x7f0000001680)="5df932ca84ec37615a5a57093d7127b320e7f8aeff2e130ab5f79b16d1c4436cb70ebacedeab1bf99bc4dbd04036e6135558a9cc6c596eaddabfea8fa65df7fdc5cb33e23a161335cf20da498e598dae3ab67a3f108e1a6cc986aa90593db68e27b6e84377368aa0b6e52d7c695ba3f9eb383963574dae52bea7984e908075d5cd1785496232a0f26b6802068335464103ba41faa0345323fe385872413d85fd3380db86e50d5d97c6ae090d3de67925a225b43d3eb0de243b99c6638f987abf9eb291a75a9bb4af2f775c29278557545af6a314414c264f418d40a72035386b153e9dba5e305d9b1b54ce3400de", 0x1, 0x0, 0xea0}, 0x50) 259.925368ms ago: executing program 0 (id=4383): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (rerun: 64) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 131.913029ms ago: executing program 2 (id=4384): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 85.346399ms ago: executing program 1 (id=4385): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe, 0x7}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="09000000010000006d0500000400000042000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000008539fb59eb2d05306ecf0802c2b3d7000000000000008000000000000080000000000000c00096495d0700da71eaed01a1ae03"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r12, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) recvmsg(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) 76.302291ms ago: executing program 2 (id=4386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="092000000000000085000000c00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=4387): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="92", 0x1}], 0x1}, 0x5) sendmsg$sock(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="d967", 0x2}], 0x1}, 0x34) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fc2bda6, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b"], 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) kernel console output (not intermixed with test programs): 763][T15793] device_add_class_symlinks+0x1cf/0x240 [ 681.563465][T15793] device_add+0x507/0xc20 [ 681.567877][T15793] wiphy_register+0x1dad/0x2ae0 [ 681.572833][T15793] ? cfg80211_event_work+0x40/0x40 [ 681.578002][T15793] ? minstrel_ht_alloc+0x88a/0x990 [ 681.583203][T15793] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 681.589348][T15793] ieee80211_register_hw+0x3464/0x4250 [ 681.594908][T15793] ? ieee80211_tasklet_handler+0x20/0x20 [ 681.600565][T15793] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 681.606496][T15793] ? __debug_object_init+0xec/0x450 [ 681.611758][T15793] ? __asan_memset+0x22/0x40 [ 681.616387][T15793] ? __hrtimer_init+0x186/0x270 [ 681.621291][T15793] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 681.627086][T15793] ? mac80211_hwsim_free+0x220/0x220 [ 681.632393][T15793] ? rcu_is_watching+0x15/0xb0 [ 681.637183][T15793] ? kstrndup+0xbd/0x140 [ 681.641473][T15793] hwsim_new_radio_nl+0xdc9/0x1a90 [ 681.646800][T15793] ? __nla_validate+0x50/0x50 [ 681.651530][T15793] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 681.657988][T15793] ? __nla_parse+0x40/0x50 [ 681.662435][T15793] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 681.668800][T15793] genl_family_rcv_msg_doit+0x211/0x310 [ 681.674375][T15793] ? end_current_label_crit_section+0x170/0x170 [ 681.680656][T15793] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 681.686593][T15793] ? bpf_lsm_capable+0x9/0x10 [ 681.691304][T15793] ? security_capable+0x89/0xb0 [ 681.696202][T15793] genl_rcv_msg+0x619/0x7a0 [ 681.700830][T15793] ? genl_bind+0x360/0x360 [ 681.705376][T15793] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 681.711730][T15793] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 681.718345][T15793] ? ref_tracker_free+0x690/0x840 [ 681.723415][T15793] netlink_rcv_skb+0x241/0x4d0 [ 681.728215][T15793] ? genl_bind+0x360/0x360 [ 681.732656][T15793] ? netlink_ack+0x1180/0x1180 [ 681.737468][T15793] ? __lock_acquire+0x7d40/0x7d40 [ 681.742530][T15793] ? down_read+0x1ac/0x2e0 [ 681.747015][T15793] genl_rcv+0x28/0x40 [ 681.751082][T15793] netlink_unicast+0x751/0x8d0 [ 681.756017][T15793] netlink_sendmsg+0x8d0/0xbf0 [ 681.760831][T15793] ? netlink_getsockopt+0x590/0x590 [ 681.766073][T15793] ? aa_sock_msg_perm+0x94/0x150 [ 681.771042][T15793] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 681.776354][T15793] ? security_socket_sendmsg+0x80/0xa0 [ 681.781840][T15793] ? netlink_getsockopt+0x590/0x590 [ 681.787080][T15793] ____sys_sendmsg+0x5ba/0x960 [ 681.791897][T15793] ? __asan_memset+0x22/0x40 [ 681.796517][T15793] ? __sys_sendmsg_sock+0x30/0x30 [ 681.801561][T15793] ? __import_iovec+0x5f2/0x850 [ 681.806539][T15793] ? import_iovec+0x73/0xa0 [ 681.811076][T15793] ___sys_sendmsg+0x2a6/0x360 [ 681.815881][T15793] ? __sys_sendmsg+0x2a0/0x2a0 [ 681.820764][T15793] __se_sys_sendmsg+0x1c2/0x2b0 [ 681.825644][T15793] ? __x64_sys_sendmsg+0x80/0x80 [ 681.830640][T15793] ? lockdep_hardirqs_on+0x98/0x150 [ 681.836087][T15793] do_syscall_64+0x55/0xa0 [ 681.840633][T15793] ? clear_bhb_loop+0x40/0x90 [ 681.845337][T15793] ? clear_bhb_loop+0x40/0x90 [ 681.850043][T15793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.855963][T15793] RIP: 0033:0x7f8f6779c819 [ 681.860405][T15793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.880383][T15793] RSP: 002b:00007f8f6863e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.888836][T15793] RAX: ffffffffffffffda RBX: 00007f8f67a15fa0 RCX: 00007f8f6779c819 [ 681.896979][T15793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 681.905244][T15793] RBP: 00007f8f67832c91 R08: 0000000000000000 R09: 0000000000000000 [ 681.913243][T15793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.921319][T15793] R13: 00007f8f67a16038 R14: 00007f8f67a15fa0 R15: 00007ffc60da77d8 [ 681.929339][T15793] [ 682.302009][T15817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.707146][T15817] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.760958][T15822] netlink: 'syz.1.2660': attribute type 27 has an invalid length. [ 682.825109][T15827] netlink: 'syz.0.2662': attribute type 8 has an invalid length. [ 683.444811][T15842] can: request_module (can-proto-0) failed. [ 683.771531][T15852] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.2667'. [ 683.798627][T15852] netlink: 'syz.1.2667': attribute type 3 has an invalid length. [ 683.806710][ T5775] Bluetooth: hci1: ISO packet for unknown connection handle 3628 [ 683.819002][T15852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2667'. [ 683.845854][T15852] netlink: 'syz.1.2667': attribute type 10 has an invalid length. [ 683.856789][T15852] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2667'. [ 683.867318][T15852] bond0: entered promiscuous mode [ 683.872723][T15852] bond_slave_0: entered promiscuous mode [ 683.879778][T15852] bond_slave_1: entered promiscuous mode [ 683.887803][T15852] batadv0: entered promiscuous mode [ 683.896532][T15852] bridge0: port 3(bond0) entered blocking state [ 683.904274][T15852] bridge0: port 3(bond0) entered disabled state [ 683.911926][T15852] bond0: entered allmulticast mode [ 683.917766][T15852] bond_slave_0: entered allmulticast mode [ 683.924129][T15852] bond_slave_1: entered allmulticast mode [ 683.936778][T15852] batadv0: entered allmulticast mode [ 683.956115][T15852] bridge0: port 3(bond0) entered blocking state [ 683.963658][T15852] bridge0: port 3(bond0) entered forwarding state [ 684.029381][T10791] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 684.039120][T10791] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 684.169848][T15867] netlink: 'syz.3.2680': attribute type 10 has an invalid length. [ 684.180276][T15867] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2680'. [ 684.541424][T15876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.978418][T15869] netlink: 'syz.3.2680': attribute type 4 has an invalid length. [ 686.023014][T15876] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.162644][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.178327][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.383274][T15897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2681'. [ 686.437615][T15895] syzkaller0: entered promiscuous mode [ 686.445837][T15895] syzkaller0: entered allmulticast mode [ 687.216398][T15898] netlink: 'syz.0.2681': attribute type 12 has an invalid length. [ 687.226476][T15898] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2681'. [ 687.246763][T15897] netlink: 'syz.0.2681': attribute type 12 has an invalid length. [ 687.256922][T15897] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2681'. [ 687.705336][T15914] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2685'. [ 687.706508][T15912] netlink: 'syz.2.2684': attribute type 10 has an invalid length. [ 687.729809][T15912] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2684'. [ 687.754521][T15912] hsr0: entered promiscuous mode [ 687.777611][T15912] bridge0: port 3(hsr0) entered blocking state [ 687.807136][T15912] bridge0: port 3(hsr0) entered disabled state [ 687.889574][T15912] hsr0: entered allmulticast mode [ 687.895236][T15912] hsr_slave_0: entered allmulticast mode [ 687.907458][T15912] hsr_slave_1: entered allmulticast mode [ 687.929954][T15912] bridge0: port 3(hsr0) entered blocking state [ 687.936990][T15912] bridge0: port 3(hsr0) entered forwarding state [ 688.588276][T15931] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2689'. [ 690.407106][T15958] delete_channel: no stack [ 690.490135][T15967] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2701'. [ 690.593026][T15967] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 690.884259][T15981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 690.987812][T15981] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 691.017471][T15982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2702'. [ 691.364358][T15971] netlink: 'syz.1.2702': attribute type 9 has an invalid length. [ 691.552224][T15993] netlink: 'syz.3.2707': attribute type 28 has an invalid length. [ 691.566655][T15993] netlink: 'syz.3.2707': attribute type 3 has an invalid length. [ 691.575063][T15993] __nla_validate_parse: 2 callbacks suppressed [ 691.575079][T15993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2707'. [ 691.614296][T15987] delete_channel: no stack [ 691.803943][T15995] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 691.824859][T15995] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2708'. [ 691.835605][T15995] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2708'. [ 691.858998][T15999] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2717'. [ 692.069238][T16004] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2711'. [ 692.117947][T15997] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2709'. [ 692.118421][T16004] bridge_slave_1: default FDB implementation only supports local addresses [ 692.142533][T16009] netlink: 'syz.3.2712': attribute type 8 has an invalid length. [ 692.168595][T16009] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 692.543233][T16015] netlink: 'syz.3.2713': attribute type 21 has an invalid length. [ 692.555508][T16015] netlink: 'syz.3.2713': attribute type 6 has an invalid length. [ 692.565631][T16015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2713'. [ 692.584110][T16017] tap0: tun_chr_ioctl cmd 1074025677 [ 692.619034][T16017] tap0: linktype set to 774 [ 692.964692][T16026] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2716'. [ 693.190061][T16026] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 693.315388][T16042] netlink: 'syz.3.2720': attribute type 39 has an invalid length. [ 694.269124][T16058] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2728'. [ 694.556429][T16059] delete_channel: no stack [ 694.970164][T16084] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2736'. [ 695.225480][T16084] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 695.751722][T16110] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 695.758393][T16110] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 699.332089][T16117] delete_channel: no stack [ 699.544973][T10786] tipc: Subscription rejected, illegal request [ 699.809221][T16141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.816758][T16141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.920095][T16141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.955609][T16141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.562207][T16146] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2751'. [ 701.246644][T16161] netlink: 'syz.0.2755': attribute type 9 has an invalid length. [ 701.271848][T16161] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2755'. [ 701.345231][T16164] netlink: 'syz.0.2755': attribute type 9 has an invalid length. [ 701.356470][T16164] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2755'. [ 701.368263][T16172] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2758'. [ 701.772151][T16189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2761'. [ 702.002057][T16201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2767'. [ 702.149842][T16203] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2768'. [ 702.165754][T16203] netlink: zone id is out of range [ 702.172633][T16203] netlink: zone id is out of range [ 702.187211][T16203] netlink: zone id is out of range [ 702.201810][T16203] netlink: zone id is out of range [ 702.217281][T16203] netlink: zone id is out of range [ 702.235703][T16203] netlink: zone id is out of range [ 702.246668][T16203] netlink: zone id is out of range [ 702.261286][T16203] netlink: zone id is out of range [ 702.267226][T16203] netlink: zone id is out of range [ 702.273614][T16203] netlink: zone id is out of range [ 703.514533][T16232] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2776'. [ 703.939602][T16243] À: port 1(vlan0) entered blocking state [ 703.945744][T16243] À: port 1(vlan0) entered disabled state [ 703.952371][T16243] vlan0: entered allmulticast mode [ 703.957524][T16243] veth0_vlan: entered allmulticast mode [ 703.968381][T16243] vlan0: entered promiscuous mode [ 704.064505][T16245] netlink: 'syz.0.2779': attribute type 16 has an invalid length. [ 704.073257][T16245] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2779'. [ 704.376630][T16248] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2780'. [ 704.517383][T16257] netlink: 'syz.3.2782': attribute type 10 has an invalid length. [ 705.444276][T16284] netlink: 'syz.1.2788': attribute type 9 has an invalid length. [ 705.560060][T16286] netlink: 'syz.0.2789': attribute type 13 has an invalid length. [ 705.575596][T16286] __nla_validate_parse: 2 callbacks suppressed [ 705.575613][T16286] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.2789'. [ 706.458890][T16315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 706.466394][T16315] IPv6: NLM_F_CREATE should be set when creating new route [ 706.473800][T16315] IPv6: NLM_F_CREATE should be set when creating new route [ 706.481147][T16315] IPv6: NLM_F_CREATE should be set when creating new route [ 707.027373][T16322] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.2798'. [ 708.098223][T16336] @0Ù: renamed from bond_slave_1 (while UP) [ 708.621588][T16344] netlink: 'syz.2.2804': attribute type 7 has an invalid length. [ 709.362898][T16358] netlink: 'syz.0.2808': attribute type 28 has an invalid length. [ 709.374601][T16358] netlink: 'syz.0.2808': attribute type 3 has an invalid length. [ 709.383117][T16358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2808'. [ 710.227723][T16370] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2811'. [ 711.767639][T16397] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 711.992032][T16409] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2824'. [ 712.015219][T16409] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2824'. [ 712.042687][T16400] delete_channel: no stack [ 712.076696][T16409] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2824'. [ 712.419676][T16431] netlink: 'syz.2.2830': attribute type 33 has an invalid length. [ 712.441226][T16431] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2830'. [ 712.794495][T16442] netlink: 'syz.0.2835': attribute type 21 has an invalid length. [ 712.825181][T16442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2835'. [ 712.889091][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2835'. [ 712.990696][T16449] netlink: 'syz.2.2836': attribute type 21 has an invalid length. [ 713.018227][T16449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2836'. [ 714.087863][T16461] syzkaller0: entered promiscuous mode [ 714.118018][T16461] syzkaller0: entered allmulticast mode [ 714.239732][T10781] wlan1: Trigger new scan to find an IBSS to join [ 714.287426][T16444] netlink: 'syz.3.2831': attribute type 9 has an invalid length. [ 714.303679][T16444] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2831'. [ 717.419016][T16472] netlink: 'syz.2.2841': attribute type 10 has an invalid length. [ 717.427224][T16472] hsr_slave_0: left promiscuous mode [ 717.434148][T16472] hsr_slave_1: left promiscuous mode [ 717.450737][T16472] bridge0: port 3(hsr0) entered disabled state [ 717.496305][T16472] hsr0 (unregistering): left allmulticast mode [ 717.502900][T16472] bridge0: port 3(hsr0) entered disabled state [ 717.529052][T16478] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.2843'. [ 717.543646][T16488] netlink: 'syz.3.2845': attribute type 10 has an invalid length. [ 717.567452][T16488] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2845'. [ 718.739820][T16527] netlink: 'syz.1.2857': attribute type 10 has an invalid length. [ 718.768915][T16527] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2857'. [ 718.788706][T16527] hsr0: entered promiscuous mode [ 718.795095][T16527] bridge0: port 4(hsr0) entered blocking state [ 718.853494][T16527] bridge0: port 4(hsr0) entered disabled state [ 718.883064][T16527] hsr0: entered allmulticast mode [ 718.888811][T16527] hsr_slave_0: entered allmulticast mode [ 718.894738][T16527] hsr_slave_1: entered allmulticast mode [ 718.904258][T16527] bridge0: port 4(hsr0) entered blocking state [ 718.910702][T16527] bridge0: port 4(hsr0) entered forwarding state [ 719.213350][ T77] wlan1: Trigger new scan to find an IBSS to join [ 719.895044][T16563] can: request_module (can-proto-0) failed. [ 719.903424][T16567] netlink: 'syz.0.2869': attribute type 21 has an invalid length. [ 719.911694][T16567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2869'. [ 720.054727][T16572] netlink: 'syz.1.2872': attribute type 21 has an invalid length. [ 720.076132][T16572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2872'. [ 720.115674][T16576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2869'. [ 720.442613][T16575] netlink: 149044 bytes leftover after parsing attributes in process `syz.3.2873'. [ 720.452160][T10781] wlan1: Creating new IBSS network, BSSID f2:ea:05:87:18:d7 [ 722.104396][T16620] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2883'. [ 722.508379][T16627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2888'. [ 722.517745][T16627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2888'. [ 722.563420][T16627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2888'. [ 722.589550][T16627] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2888'. [ 722.861494][T16645] netlink: 'syz.0.2891': attribute type 21 has an invalid length. [ 722.888796][T16645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2891'. [ 722.938323][T16640] netlink: 'syz.1.2890': attribute type 10 has an invalid length. [ 723.343608][T16655] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.2895'. [ 723.371450][T16655] netlink: 'syz.1.2895': attribute type 29 has an invalid length. [ 723.388878][T16655] netlink: 'syz.1.2895': attribute type 29 has an invalid length. [ 724.079611][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 726.441505][T16697] tap0: tun_chr_ioctl cmd 1074025677 [ 726.447843][T16697] tap0: linktype set to 6 [ 726.524808][T16710] netlink: 'syz.3.2911': attribute type 21 has an invalid length. [ 726.536282][T16710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2911'. [ 727.731794][T16725] netlink: 'syz.3.2913': attribute type 10 has an invalid length. [ 727.744542][T16725] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2913'. [ 728.962483][T16757] netlink: 'syz.1.2922': attribute type 25 has an invalid length. [ 729.015092][T16757] netlink: 'syz.1.2922': attribute type 2 has an invalid length. [ 729.158705][T16757] netlink: 'syz.1.2922': attribute type 1 has an invalid length. [ 729.230010][T16757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2922'. [ 729.725516][T16764] Ÿë: port 1(gretap0) entered blocking state [ 729.751372][T16764] Ÿë: port 1(gretap0) entered disabled state [ 729.768051][T16764] gretap0: entered allmulticast mode [ 729.822639][T16764] gretap0: entered promiscuous mode [ 730.001441][T16784] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2933'. [ 730.313497][T16784] netlink: 'syz.1.2933': attribute type 10 has an invalid length. [ 730.363333][T16784] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2933'. [ 730.730148][T16784] bond0: (slave batadv0): Releasing backup interface [ 730.764936][T16784] bridge0: port 5(batadv0) entered blocking state [ 730.771729][T16784] bridge0: port 5(batadv0) entered disabled state [ 730.934552][T16799] netlink: 'syz.3.2938': attribute type 4 has an invalid length. [ 730.942970][T16799] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2938'. [ 731.005646][T16800] veth1_macvtap: left promiscuous mode [ 731.020629][T16800] macsec0: entered allmulticast mode [ 731.304882][T16810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2941'. [ 731.406726][T16810] netlink: 'syz.3.2941': attribute type 12 has an invalid length. [ 731.437315][T16810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2941'. [ 731.500848][T16815] pim6reg1: entered promiscuous mode [ 731.521211][T16815] pim6reg1: entered allmulticast mode [ 733.731209][T16848] veth1_macvtap: left promiscuous mode [ 733.753044][T16848] macsec0: entered allmulticast mode [ 734.842654][T16871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2960'. [ 734.857077][T16870] netlink: 'syz.0.2959': attribute type 10 has an invalid length. [ 734.877369][T16870] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2959'. [ 734.888320][T16870] hsr0: entered promiscuous mode [ 734.899410][T16870] bridge0: port 3(hsr0) entered blocking state [ 734.905998][T16870] bridge0: port 3(hsr0) entered disabled state [ 734.923974][T16870] hsr0: entered allmulticast mode [ 734.934401][T16870] hsr_slave_0: entered allmulticast mode [ 734.940541][T16870] hsr_slave_1: entered allmulticast mode [ 734.948386][T16870] bridge0: port 3(hsr0) entered blocking state [ 734.954723][T16870] bridge0: port 3(hsr0) entered forwarding state [ 734.981715][T16874] netlink: 'syz.2.2961': attribute type 33 has an invalid length. [ 734.994139][T16874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2961'. [ 736.288862][T16886] syzkaller0: entered promiscuous mode [ 736.307279][T16886] syzkaller0: entered allmulticast mode [ 739.256721][T16905] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2968'. [ 739.440637][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 739.542858][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.570806][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.593200][T16916] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2971'. [ 739.671558][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.675058][T16927] sctp: [Deprecated]: syz.2.2971 (pid 16927) Use of struct sctp_assoc_value in delayed_ack socket option. [ 739.675058][T16927] Use struct sctp_sack_info instead [ 739.702507][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.713785][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.722731][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.735252][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.743152][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.773619][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.781633][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.803668][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.831251][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.851268][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.862704][T16919] __nla_validate_parse: 2 callbacks suppressed [ 739.862721][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.878723][T16931] netlink: 'syz.3.2976': attribute type 4 has an invalid length. [ 739.899932][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.926859][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.942214][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.951575][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 739.990726][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 739.994450][T16931] netlink: 'syz.3.2976': attribute type 4 has an invalid length. [ 740.011080][T16931] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.2976'. [ 740.041048][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 740.058327][T16931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2976'. [ 740.107658][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 740.116023][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 740.132230][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 740.146412][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 740.199898][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 740.217572][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 740.238761][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 740.252304][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2973'. [ 740.285357][T16919] netlink: 'syz.0.2973': attribute type 19 has an invalid length. [ 748.204989][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.211470][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.913446][T17002] __nla_validate_parse: 1 callbacks suppressed [ 748.913468][T17002] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2993'. [ 749.298694][T17009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2995'. [ 749.333799][T17011] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2996'. [ 749.408941][T17016] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2997'. [ 749.425065][T17016] netlink: 'syz.3.2997': attribute type 2 has an invalid length. [ 749.724942][T17026] syzkaller0: entered allmulticast mode [ 750.451636][ T77] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 753.166995][T17051] tap0: tun_chr_ioctl cmd 1074025677 [ 753.182018][T17051] tap0: linktype set to 773 [ 753.506794][T17065] netlink: 'syz.1.3012': attribute type 21 has an invalid length. [ 754.246439][T17092] netlink: 'syz.3.3020': attribute type 10 has an invalid length. [ 754.254500][T17092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3020'. [ 755.515986][T17125] netlink: 'syz.3.3030': attribute type 21 has an invalid length. [ 755.559817][T17125] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3030'. [ 755.588831][T17125] netlink: 'syz.3.3030': attribute type 5 has an invalid length. [ 755.607592][T17125] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3030'. [ 755.975428][T17134] delete_channel: no stack [ 756.500980][T17135] delete_channel: no stack [ 757.154473][T17163] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 757.178655][T17163] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 757.204819][T17165] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 757.230439][T17163] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 757.260315][T17163] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 757.283086][T17163] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 757.311541][T17163] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 757.350363][T17163] netlink: 'syz.0.3039': attribute type 29 has an invalid length. [ 758.276093][T17180] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.3044'. [ 758.309458][T17180] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3044'. [ 758.346502][T17181] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3043'. [ 758.987772][T17197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3048'. [ 759.999985][T13807] Bluetooth: hci1: command 0x0406 tx timeout [ 760.321260][T17208] netlink: 176956 bytes leftover after parsing attributes in process `syz.2.3051'. [ 760.983833][T17216] veth1_to_bond: entered promiscuous mode [ 761.011537][T17216] veth1_to_bond: entered allmulticast mode [ 762.014969][ T5775] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 762.043711][T17226] syzkaller0: entered promiscuous mode [ 762.052882][T17226] syzkaller0: entered allmulticast mode [ 764.886231][T17240] validate_nla: 31 callbacks suppressed [ 764.886248][T17240] netlink: 'syz.3.3061': attribute type 10 has an invalid length. [ 764.900092][T17240] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3061'. [ 764.909822][T17241] netlink: 'syz.3.3061': attribute type 4 has an invalid length. [ 765.154979][T17256] netlink: 'syz.0.3065': attribute type 2 has an invalid length. [ 765.173784][T17256] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3065'. [ 765.251454][T17262] netlink: 'syz.3.3066': attribute type 3 has an invalid length. [ 765.270864][T17262] netlink: 'syz.3.3066': attribute type 16 has an invalid length. [ 765.282277][T17262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3066'. [ 766.087237][T17281] netlink: 'syz.2.3073': attribute type 10 has an invalid length. [ 766.108525][T17281] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3073'. [ 767.801927][T17286] netlink: 'syz.2.3073': attribute type 4 has an invalid length. [ 769.458324][T17322] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3082'. [ 769.925460][T17334] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3085'. [ 769.935292][T17334] net_ratelimit: 332 callbacks suppressed [ 769.935307][T17334] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 769.950116][T17334] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 771.477440][T17322] netlink: 6116 bytes leftover after parsing attributes in process `syz.0.3082'. [ 771.486941][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'. [ 771.548455][T17337] netlink: 'syz.2.3085': attribute type 33 has an invalid length. [ 771.590855][T17337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3085'. [ 771.808890][T17349] netlink: 'syz.0.3090': attribute type 8 has an invalid length. [ 771.816864][T17349] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3090'. [ 771.891464][T17351] netlink: 'syz.2.3089': attribute type 11 has an invalid length. [ 771.909540][T17351] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3089'. [ 772.230276][T17365] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 772.258121][T17365] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 772.278124][T17365] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3093'. [ 772.306967][T17365] openvswitch: netlink: Message has 4 unknown bytes. [ 772.487908][T17364] netlink: 'syz.1.3086': attribute type 3 has an invalid length. [ 772.504429][T17364] netlink: 'syz.1.3086': attribute type 8 has an invalid length. [ 772.528179][T17364] netlink: 'syz.1.3086': attribute type 6 has an invalid length. [ 772.537671][T17364] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.3086'. [ 772.916777][T17370] netlink: 'syz.0.3094': attribute type 21 has an invalid length. [ 772.975749][T17370] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3094'. [ 773.058935][T17370] netlink: 'syz.0.3094': attribute type 5 has an invalid length. [ 773.097696][T17370] netlink: 'syz.0.3094': attribute type 6 has an invalid length. [ 773.107228][T17370] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3094'. [ 775.756883][T17406] FAULT_INJECTION: forcing a failure. [ 775.756883][T17406] name failslab, interval 1, probability 0, space 0, times 0 [ 775.774375][T17406] CPU: 1 PID: 17406 Comm: syz.3.3104 Not tainted syzkaller #0 [ 775.781912][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.792186][T17406] Call Trace: [ 775.795538][T17406] [ 775.798508][T17406] dump_stack_lvl+0x18c/0x250 [ 775.803234][T17406] ? show_regs_print_info+0x20/0x20 [ 775.808482][T17406] ? load_image+0x420/0x420 [ 775.813025][T17406] ? __might_sleep+0xe0/0xe0 [ 775.817734][T17406] ? __lock_acquire+0x7d40/0x7d40 [ 775.822882][T17406] should_fail_ex+0x39d/0x4d0 [ 775.827693][T17406] should_failslab+0x9/0x20 [ 775.832419][T17406] slab_pre_alloc_hook+0x59/0x310 [ 775.837513][T17406] ? tomoyo_encode+0x28b/0x540 [ 775.842318][T17406] ? tomoyo_encode+0x28b/0x540 [ 775.847131][T17406] __kmem_cache_alloc_node+0x53/0x250 [ 775.852562][T17406] ? tomoyo_encode+0x28b/0x540 [ 775.857354][T17406] __kmalloc+0xa4/0x230 [ 775.861643][T17406] tomoyo_encode+0x28b/0x540 [ 775.866278][T17406] tomoyo_realpath_from_path+0x592/0x5d0 [ 775.872059][T17406] tomoyo_path_number_perm+0x248/0x620 [ 775.877556][T17406] ? tomoyo_path_number_perm+0x217/0x620 [ 775.883319][T17406] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 775.888831][T17406] ? ksys_write+0x1c4/0x260 [ 775.893433][T17406] ? __fget_files+0x28/0x4b0 [ 775.898164][T17406] ? __fget_files+0x28/0x4b0 [ 775.902999][T17406] security_file_ioctl+0x70/0xa0 [ 775.908274][T17406] __se_sys_ioctl+0x48/0x170 [ 775.912911][T17406] do_syscall_64+0x55/0xa0 [ 775.917369][T17406] ? clear_bhb_loop+0x40/0x90 [ 775.922174][T17406] ? clear_bhb_loop+0x40/0x90 [ 775.926894][T17406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.932912][T17406] RIP: 0033:0x7fe1bab9c819 [ 775.937360][T17406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.957008][T17406] RSP: 002b:00007fe1bba58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.965484][T17406] RAX: ffffffffffffffda RBX: 00007fe1bae15fa0 RCX: 00007fe1bab9c819 [ 775.973507][T17406] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 775.981531][T17406] RBP: 00007fe1bba58090 R08: 0000000000000000 R09: 0000000000000000 [ 775.989546][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.997651][T17406] R13: 00007fe1bae16038 R14: 00007fe1bae15fa0 R15: 00007ffd31d1e138 [ 776.005690][T17406] [ 776.074264][T17406] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.525455][T17426] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3110'. [ 776.849728][T17441] FAULT_INJECTION: forcing a failure. [ 776.849728][T17441] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 776.873375][T17441] CPU: 0 PID: 17441 Comm: syz.2.3116 Not tainted syzkaller #0 [ 776.881023][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 776.891129][T17441] Call Trace: [ 776.894492][T17441] [ 776.897470][T17441] dump_stack_lvl+0x18c/0x250 [ 776.902237][T17441] ? show_regs_print_info+0x20/0x20 [ 776.907503][T17441] ? load_image+0x420/0x420 [ 776.912156][T17441] ? __might_fault+0xaa/0x120 [ 776.917145][T17441] ? __lock_acquire+0x7d40/0x7d40 [ 776.922226][T17441] should_fail_ex+0x39d/0x4d0 [ 776.926980][T17441] _copy_from_user+0x2f/0xe0 [ 776.931841][T17441] get_user_ifreq+0x6b/0x180 [ 776.936483][T17441] sock_ioctl+0x6f1/0x7e0 [ 776.940854][T17441] ? sock_poll+0x3e0/0x3e0 [ 776.945319][T17441] ? bpf_lsm_file_ioctl+0x9/0x10 [ 776.950292][T17441] ? security_file_ioctl+0x80/0xa0 [ 776.955443][T17441] ? sock_poll+0x3e0/0x3e0 [ 776.959898][T17441] __se_sys_ioctl+0xfd/0x170 [ 776.964513][T17441] do_syscall_64+0x55/0xa0 [ 776.968951][T17441] ? clear_bhb_loop+0x40/0x90 [ 776.973908][T17441] ? clear_bhb_loop+0x40/0x90 [ 776.978892][T17441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.984806][T17441] RIP: 0033:0x7f8f6779c819 [ 776.989426][T17441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.009164][T17441] RSP: 002b:00007f8f6863e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.017594][T17441] RAX: ffffffffffffffda RBX: 00007f8f67a15fa0 RCX: 00007f8f6779c819 [ 777.025594][T17441] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 777.033666][T17441] RBP: 00007f8f6863e090 R08: 0000000000000000 R09: 0000000000000000 [ 777.041824][T17441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.049808][T17441] R13: 00007f8f67a16038 R14: 00007f8f67a15fa0 R15: 00007ffc60da77d8 [ 777.057804][T17441] [ 777.082347][T17443] netlink: 'syz.1.3117': attribute type 12 has an invalid length. [ 777.103417][T17443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3117'. [ 777.878230][T17463] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3122'. [ 778.624284][T17469] netlink: 'syz.2.3124': attribute type 3 has an invalid length. [ 778.642010][T17469] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3124'. [ 778.748976][ T5775] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 778.973553][T17481] FAULT_INJECTION: forcing a failure. [ 778.973553][T17481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.034351][T17481] CPU: 0 PID: 17481 Comm: syz.0.3128 Not tainted syzkaller #0 [ 779.041909][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.052008][T17481] Call Trace: [ 779.055416][T17481] [ 779.058383][T17481] dump_stack_lvl+0x18c/0x250 [ 779.063127][T17481] ? show_regs_print_info+0x20/0x20 [ 779.068377][T17481] ? load_image+0x420/0x420 [ 779.072930][T17481] ? __might_fault+0xaa/0x120 [ 779.077646][T17481] ? __lock_acquire+0x7d40/0x7d40 [ 779.082725][T17481] should_fail_ex+0x39d/0x4d0 [ 779.087451][T17481] _copy_from_user+0x2f/0xe0 [ 779.092085][T17481] ip6_tnl_siocdevprivate+0x1d9/0xab0 [ 779.097599][T17481] ? __mutex_lock+0x315/0xcc0 [ 779.102434][T17481] ? ip6_tnl_start_xmit+0x11c0/0x11c0 [ 779.107957][T17481] ? dev_ioctl+0x83c/0x1140 [ 779.112507][T17481] ? __lock_acquire+0x7d40/0x7d40 [ 779.117601][T17481] ? dev_ifsioc+0x958/0xc40 [ 779.122189][T17481] dev_ioctl+0x84c/0x1140 [ 779.126586][T17481] sock_ioctl+0x74c/0x7e0 [ 779.130994][T17481] ? sock_poll+0x3e0/0x3e0 [ 779.135477][T17481] ? bpf_lsm_file_ioctl+0x9/0x10 [ 779.140562][T17481] ? security_file_ioctl+0x80/0xa0 [ 779.145712][T17481] ? sock_poll+0x3e0/0x3e0 [ 779.150172][T17481] __se_sys_ioctl+0xfd/0x170 [ 779.154817][T17481] do_syscall_64+0x55/0xa0 [ 779.159272][T17481] ? clear_bhb_loop+0x40/0x90 [ 779.163989][T17481] ? clear_bhb_loop+0x40/0x90 [ 779.168719][T17481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.174657][T17481] RIP: 0033:0x7f78ced9c819 [ 779.179114][T17481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.198853][T17481] RSP: 002b:00007f78cfbe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.207409][T17481] RAX: ffffffffffffffda RBX: 00007f78cf015fa0 RCX: 00007f78ced9c819 [ 779.215433][T17481] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 779.223461][T17481] RBP: 00007f78cfbe1090 R08: 0000000000000000 R09: 0000000000000000 [ 779.231478][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.239595][T17481] R13: 00007f78cf016038 R14: 00007f78cf015fa0 R15: 00007ffc53f3d828 [ 779.247645][T17481] [ 779.274498][T17489] netlink: 'syz.2.3130': attribute type 9 has an invalid length. [ 779.283500][T17489] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3130'. [ 780.489231][T17499] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3133'. [ 780.508346][T17474] Bluetooth: hci4: command 0x0406 tx timeout [ 780.521370][T17499] ksmbd: Unknown IPC event: 0, ignore. [ 780.925567][T17502] netlink: 'syz.1.3132': attribute type 21 has an invalid length. [ 780.944624][T17502] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3132'. [ 780.961275][T17502] netlink: 'syz.1.3132': attribute type 5 has an invalid length. [ 780.972830][T17502] netlink: 'syz.1.3132': attribute type 6 has an invalid length. [ 780.982259][T17502] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3132'. [ 781.910518][T17525] FAULT_INJECTION: forcing a failure. [ 781.910518][T17525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.980854][T17530] netlink: 'syz.0.3142': attribute type 21 has an invalid length. [ 782.021376][T17530] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3142'. [ 782.035163][T17525] CPU: 1 PID: 17525 Comm: syz.3.3140 Not tainted syzkaller #0 [ 782.042699][T17525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 782.052826][T17525] Call Trace: [ 782.056145][T17525] [ 782.059195][T17525] dump_stack_lvl+0x18c/0x250 [ 782.063920][T17525] ? show_regs_print_info+0x20/0x20 [ 782.069185][T17525] ? load_image+0x420/0x420 [ 782.073745][T17525] ? __lock_acquire+0x7d40/0x7d40 [ 782.078819][T17525] ? snprintf+0xe9/0x140 [ 782.083125][T17525] should_fail_ex+0x39d/0x4d0 [ 782.087960][T17525] _copy_to_user+0x2f/0xa0 [ 782.092528][T17525] simple_read_from_buffer+0xe7/0x150 [ 782.097964][T17525] proc_fail_nth_read+0x1e8/0x260 [ 782.103132][T17525] ? proc_fault_inject_write+0x360/0x360 [ 782.108826][T17525] ? fsnotify_perm+0x271/0x5e0 [ 782.113639][T17525] ? proc_fault_inject_write+0x360/0x360 [ 782.119351][T17525] vfs_read+0x28b/0x970 [ 782.123557][T17525] ? kernel_read+0x1e0/0x1e0 [ 782.128225][T17525] ? __fget_files+0x28/0x4b0 [ 782.132852][T17525] ? __fget_files+0x28/0x4b0 [ 782.137567][T17525] ? __fget_files+0x43d/0x4b0 [ 782.142435][T17525] ? __fdget_pos+0x2a3/0x330 [ 782.147247][T17525] ? ksys_read+0x75/0x260 [ 782.151718][T17525] ksys_read+0x150/0x260 [ 782.156127][T17525] ? vfs_write+0x990/0x990 [ 782.160610][T17525] ? lockdep_hardirqs_on+0x98/0x150 [ 782.165871][T17525] do_syscall_64+0x55/0xa0 [ 782.170503][T17525] ? clear_bhb_loop+0x40/0x90 [ 782.175235][T17525] ? clear_bhb_loop+0x40/0x90 [ 782.179970][T17525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.185994][T17525] RIP: 0033:0x7fe1bab5d04e [ 782.190449][T17525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 782.192524][T17530] netlink: 'syz.0.3142': attribute type 21 has an invalid length. [ 782.210510][T17525] RSP: 002b:00007fe1bba57fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 782.210572][T17525] RAX: ffffffffffffffda RBX: 00007fe1bba586c0 RCX: 00007fe1bab5d04e [ 782.210587][T17525] RDX: 000000000000000f RSI: 00007fe1bba580a0 RDI: 0000000000000005 [ 782.210600][T17525] RBP: 00007fe1bba58090 R08: 0000000000000000 R09: 0000000000000000 [ 782.210612][T17525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.258957][T17525] R13: 00007fe1bae16038 R14: 00007fe1bae15fa0 R15: 00007ffd31d1e138 [ 782.267000][T17525] [ 782.310386][T17530] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3142'. [ 782.911614][ T4856] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 783.166215][T17547] netlink: 'syz.3.3145': attribute type 21 has an invalid length. [ 783.208775][T17547] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3145'. [ 783.251536][T17547] netlink: 'syz.3.3145': attribute type 5 has an invalid length. [ 783.289470][T17547] netlink: 'syz.3.3145': attribute type 6 has an invalid length. [ 783.356059][T17547] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3145'. [ 783.603634][T17559] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3148'. [ 788.694194][T17642] cgroup: fork rejected by pids controller in /syz1 [ 789.813587][T17635] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 790.520512][T17770] Dead loop on virtual device ip6_vti0, fix it urgently! [ 790.748783][T17780] netlink: 'syz.0.3179': attribute type 1 has an invalid length. [ 790.767544][T17780] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3179'. [ 791.519833][T10782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.719629][T10782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.859325][T10782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.904434][T17474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 791.914698][T17474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 791.923987][T17474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 791.935084][T17474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 791.944203][T17474] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 791.952070][T17474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 792.026084][T10782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.109441][T17813] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3186'. [ 793.514114][T17805] chnl_net:caif_netlink_parms(): no params data found [ 794.059568][T17474] Bluetooth: hci2: command tx timeout [ 794.572249][T17833] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3190'. [ 794.608392][T17833] bridge_slave_1: default FDB implementation only supports local addresses [ 794.678577][T17831] netlink: 'syz.2.3190': attribute type 33 has an invalid length. [ 794.861331][T17831] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3190'. [ 795.536090][T17805] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.572644][T17805] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.635163][T17805] bridge_slave_0: entered allmulticast mode [ 795.667936][T17805] bridge_slave_0: entered promiscuous mode [ 795.714998][T17866] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 796.078463][T17474] Bluetooth: hci2: command tx timeout [ 796.588595][T17805] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.596043][T17805] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.618968][T17805] bridge_slave_1: entered allmulticast mode [ 796.660994][T17805] bridge_slave_1: entered promiscuous mode [ 796.726548][T17866] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 797.328696][T17879] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3199'. [ 797.386684][T17805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.478650][T17879] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 797.500832][T17879] CPU: 1 PID: 17879 Comm: syz.0.3199 Not tainted syzkaller #0 [ 797.508371][T17879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 797.518624][T17879] Call Trace: [ 797.521955][T17879] [ 797.524915][T17879] dump_stack_lvl+0x18c/0x250 [ 797.529664][T17879] ? show_regs_print_info+0x20/0x20 [ 797.534916][T17879] ? load_image+0x420/0x420 [ 797.539482][T17879] sysfs_warn_dup+0x8e/0xa0 [ 797.544023][T17879] sysfs_do_create_link_sd+0xc0/0x110 [ 797.549441][T17879] device_add_class_symlinks+0x1cf/0x240 [ 797.555125][T17879] device_add+0x507/0xc20 [ 797.559503][T17879] wiphy_register+0x1dad/0x2ae0 [ 797.564409][T17879] ? cfg80211_event_work+0x40/0x40 [ 797.569643][T17879] ? minstrel_ht_alloc+0x88a/0x990 [ 797.574800][T17879] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 797.580910][T17879] ieee80211_register_hw+0x3464/0x4250 [ 797.586435][T17879] ? ieee80211_tasklet_handler+0x20/0x20 [ 797.592200][T17879] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 797.598132][T17879] ? __debug_object_init+0xec/0x450 [ 797.603389][T17879] ? __asan_memset+0x22/0x40 [ 797.608034][T17879] ? __hrtimer_init+0x186/0x270 [ 797.612932][T17879] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 797.618724][T17879] ? mac80211_hwsim_free+0x220/0x220 [ 797.624045][T17879] ? rcu_is_watching+0x15/0xb0 [ 797.628927][T17879] ? kstrndup+0xbd/0x140 [ 797.633288][T17879] hwsim_new_radio_nl+0xdc9/0x1a90 [ 797.638454][T17879] ? __nla_validate+0x50/0x50 [ 797.643174][T17879] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 797.649551][T17879] ? __nla_parse+0x40/0x50 [ 797.654009][T17879] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 797.660375][T17879] genl_family_rcv_msg_doit+0x211/0x310 [ 797.665968][T17879] ? end_current_label_crit_section+0x170/0x170 [ 797.672260][T17879] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 797.678563][T17879] ? bpf_lsm_capable+0x9/0x10 [ 797.683280][T17879] ? security_capable+0x89/0xb0 [ 797.688240][T17879] genl_rcv_msg+0x619/0x7a0 [ 797.692801][T17879] ? genl_bind+0x360/0x360 [ 797.697421][T17879] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 797.703779][T17879] ? ref_tracker_free+0x690/0x840 [ 797.708854][T17879] netlink_rcv_skb+0x241/0x4d0 [ 797.713659][T17879] ? genl_bind+0x360/0x360 [ 797.718110][T17879] ? netlink_ack+0x1180/0x1180 [ 797.722925][T17879] ? __lock_acquire+0x7d40/0x7d40 [ 797.728000][T17879] ? down_read+0x1ac/0x2e0 [ 797.732452][T17879] genl_rcv+0x28/0x40 [ 797.736461][T17879] netlink_unicast+0x751/0x8d0 [ 797.741292][T17879] netlink_sendmsg+0x8d0/0xbf0 [ 797.746102][T17879] ? netlink_getsockopt+0x590/0x590 [ 797.751341][T17879] ? aa_sock_msg_perm+0x94/0x150 [ 797.756313][T17879] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 797.761632][T17879] ? security_socket_sendmsg+0x80/0xa0 [ 797.767210][T17879] ? netlink_getsockopt+0x590/0x590 [ 797.772537][T17879] ____sys_sendmsg+0x5ba/0x960 [ 797.777425][T17879] ? __asan_memset+0x22/0x40 [ 797.782139][T17879] ? __sys_sendmsg_sock+0x30/0x30 [ 797.787185][T17879] ? __import_iovec+0x5f2/0x850 [ 797.792179][T17879] ? import_iovec+0x73/0xa0 [ 797.796716][T17879] ___sys_sendmsg+0x2a6/0x360 [ 797.801779][T17879] ? __sys_sendmsg+0x2a0/0x2a0 [ 797.806625][T17879] __se_sys_sendmsg+0x1c2/0x2b0 [ 797.811512][T17879] ? __x64_sys_sendmsg+0x80/0x80 [ 797.816499][T17879] ? lockdep_hardirqs_on+0x98/0x150 [ 797.821734][T17879] do_syscall_64+0x55/0xa0 [ 797.826193][T17879] ? clear_bhb_loop+0x40/0x90 [ 797.830906][T17879] ? clear_bhb_loop+0x40/0x90 [ 797.835619][T17879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.841626][T17879] RIP: 0033:0x7f78ced9c819 [ 797.846254][T17879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.866063][T17879] RSP: 002b:00007f78cfbe1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.874854][T17879] RAX: ffffffffffffffda RBX: 00007f78cf015fa0 RCX: 00007f78ced9c819 [ 797.882862][T17879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 797.890870][T17879] RBP: 00007f78cee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 797.898959][T17879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.906958][T17879] R13: 00007f78cf016038 R14: 00007f78cf015fa0 R15: 00007ffc53f3d828 [ 797.914975][T17879] [ 798.011683][T17805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.020949][T17883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.046408][T17883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.159961][T17474] Bluetooth: hci2: command tx timeout [ 798.181077][T17883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.200488][T17883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.641170][T17889] netlink: 'syz.3.3201': attribute type 9 has an invalid length. [ 798.658525][T17889] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3201'. [ 798.686403][T17805] team0: Port device team_slave_0 added [ 798.695715][T17805] team0: Port device team_slave_1 added [ 798.746474][T17886] netlink: 'syz.3.3201': attribute type 39 has an invalid length. [ 798.775330][T17887] netlink: 'syz.3.3201': attribute type 10 has an invalid length. [ 799.130182][T17805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.137257][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.164187][T17805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.339078][T17895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 799.730447][T17805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.737473][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.818359][T17805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.970816][T17805] hsr_slave_0: entered promiscuous mode [ 799.983842][T17805] hsr_slave_1: entered promiscuous mode [ 800.005565][T17913] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 800.027047][T17913] veth0_macvtap: left promiscuous mode [ 800.249690][T17474] Bluetooth: hci2: command tx timeout [ 800.278539][T17888] netlink: 'syz.3.3201': attribute type 9 has an invalid length. [ 800.341748][T17888] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3201'. [ 800.707370][T17922] netlink: 'syz.2.3207': attribute type 3 has an invalid length. [ 800.742744][T17922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3207'. [ 800.898156][T17926] netlink: 'syz.3.3208': attribute type 29 has an invalid length. [ 800.928204][T17926] netlink: 'syz.3.3208': attribute type 3 has an invalid length. [ 800.958588][T17926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3208'. [ 800.967540][T10782] hsr_slave_0: left promiscuous mode [ 801.011638][T10782] hsr_slave_1: left promiscuous mode [ 801.021529][T10782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.046993][T10782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.083960][T10782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.118470][T10782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.162820][T10782] bridge0: port 5(batadv0) entered disabled state [ 801.240403][T10782] hsr0: left allmulticast mode [ 801.245478][T10782] bridge0: port 4(hsr0) entered disabled state [ 801.263300][T10782] bond0: left allmulticast mode [ 801.269546][T10782] bond_slave_0: left allmulticast mode [ 801.275082][T10782] @0Ù: left allmulticast mode [ 801.285579][T10782] bridge0: port 3(bond0) entered disabled state [ 801.296835][T10782] bridge_slave_1: left allmulticast mode [ 801.318189][T10782] bridge_slave_1: left promiscuous mode [ 801.324073][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.374367][T10782] bridge_slave_0: left allmulticast mode [ 801.388258][T10782] bridge_slave_0: left promiscuous mode [ 801.577253][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.740360][T10782] veth1_macvtap: left promiscuous mode [ 801.772164][T10782] veth0_macvtap: left promiscuous mode [ 802.416976][T17964] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3213'. [ 802.551692][T10782] team0 (unregistering): Port device team_slave_1 removed [ 802.605254][T10782] team0 (unregistering): Port device team_slave_0 removed [ 802.656589][T10782] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 802.667593][T10782] @0Ù (unregistering): left promiscuous mode [ 802.713744][T10782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.723471][T10782] bond_slave_0 (unregistering): left promiscuous mode [ 803.104386][T10782] bond0 (unregistering): Released all slaves [ 803.394411][T17967] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3214'. [ 803.480291][T17969] netlink: 'syz.3.3215': attribute type 21 has an invalid length. [ 803.507468][T17969] IPv6: NLM_F_CREATE should be specified when creating new route [ 805.488613][T17805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 805.515668][T17805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 805.545236][T17805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 805.567656][T17805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 805.796960][T17805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.827808][T17805] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.863143][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.870410][T10782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.903703][T10782] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.911031][T10782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.040181][T17805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.673629][T17805] veth0_vlan: entered promiscuous mode [ 807.719660][T17805] veth1_vlan: entered promiscuous mode [ 807.884266][T17805] veth0_macvtap: entered promiscuous mode [ 808.325807][T18081] netlink: 'syz.3.3239': attribute type 3 has an invalid length. [ 808.378299][T17805] veth1_macvtap: entered promiscuous mode [ 808.425257][T18081] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3239'. [ 808.467022][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 808.518100][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.541737][T17805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.573267][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.598217][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.619957][T17805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.674497][T18085] netlink: 'syz.2.3240': attribute type 19 has an invalid length. [ 808.687540][T18085] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3240'. [ 808.731637][T17805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.745362][T17805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.756222][T17805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.765543][T17805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.970059][T18096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3243'. [ 808.996684][T10798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.011748][T10798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.043541][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.050810][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.095179][T10782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.123693][T10782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.738960][T18114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3245'. [ 809.798409][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3245'. [ 810.112468][T18129] dvmrp1: tun_chr_ioctl cmd 1074033753 [ 810.295793][T18138] netlink: 'syz.3.3251': attribute type 39 has an invalid length. [ 810.495518][T18142] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3252'. [ 812.145221][T18176] netlink: 'syz.2.3260': attribute type 21 has an invalid length. [ 812.171708][T18176] IPv6: NLM_F_CREATE should be specified when creating new route [ 812.219992][T18180] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3260'. [ 813.778341][T18212] netlink: 'syz.3.3267': attribute type 21 has an invalid length. [ 813.786810][T18212] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3267'. [ 814.034581][T18228] netlink: 'syz.2.3269': attribute type 10 has an invalid length. [ 814.052146][T10798] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 814.484260][T18238] netlink: 'syz.3.3271': attribute type 29 has an invalid length. [ 814.502858][T18238] netlink: 'syz.3.3271': attribute type 3 has an invalid length. [ 814.520886][T18238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3271'. [ 815.466176][T18265] syzkaller0: entered promiscuous mode [ 815.488565][T18265] syzkaller0: entered allmulticast mode [ 815.854507][T18285] netlink: 'syz.3.3279': attribute type 3 has an invalid length. [ 815.888136][T18285] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3279'. [ 817.287404][T18316] delete_channel: no stack [ 817.307204][T18316] delete_channel: no stack [ 819.733683][T18343] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3291'. [ 820.896820][T18358] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3295'. [ 825.329815][T18424] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 825.365614][T18428] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3314'. [ 825.471868][T18436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3318'. [ 825.484021][T18436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3318'. [ 825.497315][T18437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3318'. [ 825.514505][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3316'. [ 825.894889][T18436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3318'. [ 826.015096][T18450] C: renamed from team_slave_0 (while UP) [ 826.047319][T18450] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 826.070560][T18450] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3320'. [ 826.186116][T18450] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 826.754687][T18469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3327'. [ 826.806163][T18469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3327'. [ 826.850976][T18471] netlink: 'syz.0.3328': attribute type 3 has an invalid length. [ 826.862715][T18471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3328'. [ 826.930321][T18471] netlink: 'syz.0.3328': attribute type 3 has an invalid length. [ 828.668552][T18521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.891544][T18530] netlink: 'syz.2.3342': attribute type 21 has an invalid length. [ 828.938689][T18531] netlink: 'syz.2.3342': attribute type 21 has an invalid length. [ 828.946663][T18531] netlink: 'syz.2.3342': attribute type 5 has an invalid length. [ 829.009657][T18531] netlink: 'syz.2.3342': attribute type 6 has an invalid length. [ 830.479416][T18562] __nla_validate_parse: 6 callbacks suppressed [ 830.479433][T18562] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3351'. [ 831.244606][T18593] À: port 1(vlan0) entered blocking state [ 831.254676][T18593] À: port 1(vlan0) entered disabled state [ 831.262073][T18593] vlan0: entered allmulticast mode [ 831.272097][T18593] veth0_vlan: entered allmulticast mode [ 831.285082][T18593] vlan0: entered promiscuous mode [ 831.337889][T18606] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3359'. [ 831.905097][T18613] syzkaller0: entered promiscuous mode [ 831.926582][T18613] syzkaller0: entered allmulticast mode [ 832.871989][T17474] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 834.171692][T18640] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3370'. [ 835.405632][T18640] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 835.417245][T18640] CPU: 0 PID: 18640 Comm: syz.0.3370 Not tainted syzkaller #0 [ 835.424788][T18640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 835.434895][T18640] Call Trace: [ 835.438216][T18640] [ 835.441208][T18640] dump_stack_lvl+0x18c/0x250 [ 835.445944][T18640] ? show_regs_print_info+0x20/0x20 [ 835.451172][T18640] ? load_image+0x420/0x420 [ 835.455703][T18640] sysfs_warn_dup+0x8e/0xa0 [ 835.460226][T18640] sysfs_do_create_link_sd+0xc0/0x110 [ 835.465665][T18640] device_add_class_symlinks+0x1cf/0x240 [ 835.471442][T18640] device_add+0x507/0xc20 [ 835.475821][T18640] wiphy_register+0x1dad/0x2ae0 [ 835.480705][T18640] ? cfg80211_event_work+0x40/0x40 [ 835.485828][T18640] ? minstrel_ht_alloc+0x88a/0x990 [ 835.490984][T18640] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 835.497138][T18640] ieee80211_register_hw+0x3464/0x4250 [ 835.502775][T18640] ? ieee80211_tasklet_handler+0x20/0x20 [ 835.508637][T18640] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 835.514602][T18640] ? __debug_object_init+0xec/0x450 [ 835.519847][T18640] ? __asan_memset+0x22/0x40 [ 835.524487][T18640] ? __hrtimer_init+0x186/0x270 [ 835.529357][T18640] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 835.535128][T18640] ? mac80211_hwsim_free+0x220/0x220 [ 835.540453][T18640] ? rcu_is_watching+0x15/0xb0 [ 835.545315][T18640] ? kstrndup+0xbd/0x140 [ 835.549681][T18640] hwsim_new_radio_nl+0xdc9/0x1a90 [ 835.554898][T18640] ? __nla_validate+0x50/0x50 [ 835.559590][T18640] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 835.565943][T18640] ? __nla_parse+0x40/0x50 [ 835.570386][T18640] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 835.576759][T18640] genl_family_rcv_msg_doit+0x211/0x310 [ 835.582365][T18640] ? end_current_label_crit_section+0x170/0x170 [ 835.588688][T18640] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 835.594757][T18640] ? bpf_lsm_capable+0x9/0x10 [ 835.599539][T18640] ? security_capable+0x89/0xb0 [ 835.604412][T18640] genl_rcv_msg+0x619/0x7a0 [ 835.609023][T18640] ? genl_bind+0x360/0x360 [ 835.613452][T18640] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 835.619790][T18640] ? ref_tracker_free+0x690/0x840 [ 835.624826][T18640] netlink_rcv_skb+0x241/0x4d0 [ 835.629596][T18640] ? genl_bind+0x360/0x360 [ 835.634028][T18640] ? netlink_ack+0x1180/0x1180 [ 835.638821][T18640] ? __lock_acquire+0x7d40/0x7d40 [ 835.643858][T18640] ? down_read+0x1ac/0x2e0 [ 835.648284][T18640] genl_rcv+0x28/0x40 [ 835.652269][T18640] netlink_unicast+0x751/0x8d0 [ 835.657047][T18640] netlink_sendmsg+0x8d0/0xbf0 [ 835.661826][T18640] ? netlink_getsockopt+0x590/0x590 [ 835.667034][T18640] ? aa_sock_msg_perm+0x94/0x150 [ 835.671979][T18640] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 835.677270][T18640] ? security_socket_sendmsg+0x80/0xa0 [ 835.682768][T18640] ? netlink_getsockopt+0x590/0x590 [ 835.688012][T18640] ____sys_sendmsg+0x5ba/0x960 [ 835.692855][T18640] ? __asan_memset+0x22/0x40 [ 835.697456][T18640] ? __sys_sendmsg_sock+0x30/0x30 [ 835.702479][T18640] ? __import_iovec+0x5f2/0x850 [ 835.707342][T18640] ? import_iovec+0x73/0xa0 [ 835.711849][T18640] ___sys_sendmsg+0x2a6/0x360 [ 835.716536][T18640] ? __sys_sendmsg+0x2a0/0x2a0 [ 835.721463][T18640] __se_sys_sendmsg+0x1c2/0x2b0 [ 835.726433][T18640] ? __x64_sys_sendmsg+0x80/0x80 [ 835.731416][T18640] ? lockdep_hardirqs_on+0x98/0x150 [ 835.736628][T18640] do_syscall_64+0x55/0xa0 [ 835.741053][T18640] ? clear_bhb_loop+0x40/0x90 [ 835.745794][T18640] ? clear_bhb_loop+0x40/0x90 [ 835.750496][T18640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.756405][T18640] RIP: 0033:0x7f78ced9c819 [ 835.760841][T18640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.780542][T18640] RSP: 002b:00007f78cfbe1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.788959][T18640] RAX: ffffffffffffffda RBX: 00007f78cf015fa0 RCX: 00007f78ced9c819 [ 835.796934][T18640] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 835.804904][T18640] RBP: 00007f78cee32c91 R08: 0000000000000000 R09: 0000000000000000 [ 835.812890][T18640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.820865][T18640] R13: 00007f78cf016038 R14: 00007f78cf015fa0 R15: 00007ffc53f3d828 [ 835.828943][T18640] [ 836.083421][T18659] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3376'. [ 837.280061][T18672] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3379'. [ 837.577498][T18681] netlink: 'syz.0.3381': attribute type 1 has an invalid length. [ 838.500932][T18702] netlink: 'syz.1.3387': attribute type 10 has an invalid length. [ 838.529028][T18702] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3387'. [ 838.902759][T18715] netlink: 'syz.3.3391': attribute type 10 has an invalid length. [ 838.934014][T18715] bridge0: port 3(hsr0) entered disabled state [ 838.940600][T18715] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.981289][T18715] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 839.007034][T18715] bridge0: port 3(hsr0) entered blocking state [ 839.013438][T18715] bridge0: port 3(hsr0) entered forwarding state [ 839.020198][T18715] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.027491][T18715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.040201][T18715] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 839.253228][T18724] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3393'. [ 839.338147][T17474] Bluetooth: hci2: ISO packet for unknown connection handle 7 [ 839.509280][T18726] delete_channel: no stack [ 839.785814][T18757] netlink: 'syz.2.3402': attribute type 10 has an invalid length. [ 840.113059][T18757] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.131557][T18757] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.148224][T18757] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.163769][T18757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.241035][T18763] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3401'. [ 840.432203][T18783] netlink: 'syz.0.3407': attribute type 13 has an invalid length. [ 840.442160][T18783] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3407'. [ 840.740910][T18787] netlink: 'syz.0.3409': attribute type 29 has an invalid length. [ 840.892718][T18794] netlink: 'syz.1.3412': attribute type 2 has an invalid length. [ 840.913001][T18796] netlink: 'syz.0.3413': attribute type 21 has an invalid length. [ 840.917229][T18794] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3412'. [ 840.923105][T18796] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3413'. [ 841.021264][T18800] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3411'. [ 841.056211][T18800] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.3411'. [ 841.084412][T17474] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 841.249738][T18802] netlink: 'syz.2.3414': attribute type 10 has an invalid length. [ 841.271944][T18802] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3414'. [ 842.422304][T18819] netlink: 64899 bytes leftover after parsing attributes in process `syz.0.3420'. [ 843.508982][T18829] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3423'. [ 843.659517][T18826] netlink: 'syz.3.3423': attribute type 10 has an invalid length. [ 843.725033][T18826] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.798325][T18826] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.827525][T18826] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.843668][T18826] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.885906][T18826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.926534][T18826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.936613][T18826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.956169][T18826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.982315][T18826] team0: Port device geneve1 added [ 844.008469][T18839] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3426'. [ 844.133330][T18838] syzkaller0: entered promiscuous mode [ 844.161383][T18838] syzkaller0: entered allmulticast mode [ 844.384690][T18847] netlink: 'syz.3.3427': attribute type 10 has an invalid length. [ 844.393616][T18847] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3427'. [ 844.524526][T18856] netlink: 'syz.1.3429': attribute type 1 has an invalid length. [ 844.774113][T18865] netlink: 'syz.0.3432': attribute type 2 has an invalid length. [ 844.783063][T18865] netlink: 17191 bytes leftover after parsing attributes in process `syz.0.3432'. [ 845.092013][T18869] netlink: 'syz.1.3433': attribute type 1 has an invalid length. [ 845.103540][T18869] netlink: 'syz.1.3433': attribute type 2 has an invalid length. [ 845.112606][T18869] netlink: 'syz.1.3433': attribute type 2 has an invalid length. [ 845.219151][T18869] netlink: 'syz.1.3433': attribute type 3 has an invalid length. [ 845.248331][T18869] netlink: 'syz.1.3433': attribute type 4 has an invalid length. [ 845.298885][T18869] netlink: 'syz.1.3433': attribute type 5 has an invalid length. [ 845.336538][T18869] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.3433'. [ 846.378999][T18894] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 846.445881][T18894] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3440'. [ 848.300928][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3443'. [ 848.335933][T18904] netlink: 15991 bytes leftover after parsing attributes in process `syz.0.3443'. [ 848.512923][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 848.526345][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 848.560268][T18913] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3446'. [ 848.576692][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 848.586242][T18913] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3446'. [ 848.734112][T18923] validate_nla: 7 callbacks suppressed [ 848.734132][T18923] netlink: 'syz.2.3449': attribute type 10 has an invalid length. [ 848.780105][T18923] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 848.790145][T18923] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 849.318264][T18939] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3455'. [ 849.330487][T18939] bond_slave_0: entered promiscuous mode [ 849.336608][T18939] bond_slave_1: entered promiscuous mode [ 849.681303][T18948] tap0: tun_chr_ioctl cmd 1074025677 [ 849.686854][T18948] tap0: linktype set to 6 [ 850.076036][T18958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3459'. [ 850.312871][T18960] netlink: 'syz.2.3461': attribute type 10 has an invalid length. [ 851.070218][T18976] netlink: 'syz.0.3466': attribute type 10 has an invalid length. [ 851.157082][T18976] team0: Port device netdevsim0 added [ 851.919998][T18992] syz.0.3472[18992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 851.920145][T18992] syz.0.3472[18992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 854.163527][T19035] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.3482'. [ 855.737079][T19068] netlink: 'syz.0.3490': attribute type 40 has an invalid length. [ 855.995681][T19078] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3491'. [ 859.764823][T19097] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3497'. [ 861.238455][T19109] netlink: 'syz.2.3500': attribute type 10 has an invalid length. [ 861.801118][T19112] netlink: 150456 bytes leftover after parsing attributes in process `syz.0.3502'. [ 861.840739][T19112] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 862.287673][T19126] netlink: 'syz.0.3506': attribute type 11 has an invalid length. [ 868.501614][T19189] netlink: 'syz.3.3525': attribute type 17 has an invalid length. [ 868.509853][T19189] netlink: 'syz.3.3525': attribute type 16 has an invalid length. [ 868.518562][T19189] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3525'. [ 869.537252][T19246] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3536'. [ 870.028388][T19253] netlink: 'syz.0.3538': attribute type 27 has an invalid length. [ 870.092109][T19253] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3538'. [ 870.599924][T19251] netlink: 'syz.1.3537': attribute type 9 has an invalid length. [ 870.610168][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.616596][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.689217][T19256] netlink: 'syz.2.3539': attribute type 21 has an invalid length. [ 870.693414][T19251] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3537'. [ 870.725416][T19256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3539'. [ 870.726898][T19248] netlink: 'syz.1.3537': attribute type 9 has an invalid length. [ 870.811802][T19248] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3537'. [ 870.824005][T19262] veth1_to_bond: entered allmulticast mode [ 871.585477][T19294] lo: entered allmulticast mode [ 871.642615][T19294] lo: entered promiscuous mode [ 871.651570][T19294] lo: left allmulticast mode [ 872.083978][T19314] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3555'. [ 872.096933][T19323] netlink: 'syz.3.3558': attribute type 10 has an invalid length. [ 872.108515][T19314] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 872.117601][T19314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 872.119297][T19323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3558'. [ 872.467017][T19338] netlink: 'syz.3.3561': attribute type 11 has an invalid length. [ 872.493691][T19338] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.3561'. [ 872.813815][T19346] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3564'. [ 873.053746][T19350] openvswitch: netlink: Flow actions attr not present in new flow. [ 873.154347][T19357] netlink: 'syz.3.3568': attribute type 10 has an invalid length. [ 873.894065][T19357] team0: Port device wlan1 added [ 873.916271][T19360] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 873.925274][T19360] CPU: 1 PID: 19360 Comm: syz.2.3569 Not tainted syzkaller #0 [ 873.932822][T19360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 873.942966][T19360] Call Trace: [ 873.944425][T19355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.946319][T19360] [ 873.959264][T19360] dump_stack_lvl+0x18c/0x250 [ 873.964055][T19360] ? show_regs_print_info+0x20/0x20 [ 873.969369][T19360] ? load_image+0x420/0x420 [ 873.974038][T19360] sysfs_warn_dup+0x8e/0xa0 [ 873.978725][T19360] sysfs_do_create_link_sd+0xc0/0x110 [ 873.984197][T19360] device_add_class_symlinks+0x1cf/0x240 [ 873.989939][T19360] device_add+0x507/0xc20 [ 873.994382][T19360] wiphy_register+0x1dad/0x2ae0 [ 873.999376][T19360] ? cfg80211_event_work+0x40/0x40 [ 874.004547][T19360] ? minstrel_ht_alloc+0x88a/0x990 [ 874.009778][T19360] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 874.015959][T19360] ieee80211_register_hw+0x3464/0x4250 [ 874.021664][T19360] ? ieee80211_tasklet_handler+0x20/0x20 [ 874.022993][T19370] netlink: 'syz.1.3571': attribute type 29 has an invalid length. [ 874.027354][T19360] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 874.027409][T19360] ? __debug_object_init+0xec/0x450 [ 874.027463][T19360] ? __asan_memset+0x22/0x40 [ 874.027503][T19360] ? __hrtimer_init+0x186/0x270 [ 874.056029][T19360] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 874.061883][T19360] ? mac80211_hwsim_free+0x220/0x220 [ 874.067298][T19360] ? rcu_is_watching+0x15/0xb0 [ 874.072110][T19360] ? kstrndup+0xbd/0x140 [ 874.076441][T19360] hwsim_new_radio_nl+0xdc9/0x1a90 [ 874.081651][T19360] ? __nla_validate+0x50/0x50 [ 874.086516][T19360] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 874.093025][T19360] ? __nla_parse+0x40/0x50 [ 874.097505][T19360] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 874.103988][T19360] genl_family_rcv_msg_doit+0x211/0x310 [ 874.109578][T19360] ? end_current_label_crit_section+0x170/0x170 [ 874.115885][T19360] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 874.121852][T19360] ? bpf_lsm_capable+0x9/0x10 [ 874.126572][T19360] ? security_capable+0x89/0xb0 [ 874.131498][T19360] genl_rcv_msg+0x619/0x7a0 [ 874.136072][T19360] ? genl_bind+0x360/0x360 [ 874.140617][T19360] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 874.147104][T19360] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 874.153886][T19360] netlink_rcv_skb+0x241/0x4d0 [ 874.158708][T19360] ? genl_bind+0x360/0x360 [ 874.163173][T19360] ? netlink_ack+0x1180/0x1180 [ 874.168209][T19360] ? __lock_acquire+0x7d40/0x7d40 [ 874.173307][T19360] ? down_read+0x1ac/0x2e0 [ 874.177778][T19360] genl_rcv+0x28/0x40 [ 874.181803][T19360] netlink_unicast+0x751/0x8d0 [ 874.186666][T19360] netlink_sendmsg+0x8d0/0xbf0 [ 874.191482][T19360] ? perf_trace_lock+0x304/0x3b0 [ 874.196492][T19360] ? netlink_getsockopt+0x590/0x590 [ 874.201754][T19360] ? aa_sock_msg_perm+0x94/0x150 [ 874.206748][T19360] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 874.212074][T19360] ? security_socket_sendmsg+0x80/0xa0 [ 874.217567][T19360] ? netlink_getsockopt+0x590/0x590 [ 874.222822][T19360] ____sys_sendmsg+0x5ba/0x960 [ 874.227688][T19360] ? __asan_memset+0x22/0x40 [ 874.232327][T19360] ? __sys_sendmsg_sock+0x30/0x30 [ 874.237395][T19360] ? __import_iovec+0x5f2/0x850 [ 874.242322][T19360] ? import_iovec+0x73/0xa0 [ 874.246880][T19360] ___sys_sendmsg+0x2a6/0x360 [ 874.251622][T19360] ? __sys_sendmsg+0x2a0/0x2a0 [ 874.256615][T19360] __se_sys_sendmsg+0x1c2/0x2b0 [ 874.261712][T19360] ? __x64_sys_sendmsg+0x80/0x80 [ 874.266759][T19360] ? lockdep_hardirqs_on+0x98/0x150 [ 874.272016][T19360] do_syscall_64+0x55/0xa0 [ 874.276470][T19360] ? clear_bhb_loop+0x40/0x90 [ 874.281197][T19360] ? clear_bhb_loop+0x40/0x90 [ 874.286038][T19360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.292059][T19360] RIP: 0033:0x7f8f6779c819 [ 874.296521][T19360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.316339][T19360] RSP: 002b:00007f8f6863e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.324981][T19360] RAX: ffffffffffffffda RBX: 00007f8f67a15fa0 RCX: 00007f8f6779c819 [ 874.333167][T19360] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 874.341174][T19360] RBP: 00007f8f67832c91 R08: 0000000000000000 R09: 0000000000000000 [ 874.349183][T19360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.357195][T19360] R13: 00007f8f67a16038 R14: 00007f8f67a15fa0 R15: 00007ffc60da77d8 [ 874.365260][T19360] [ 874.437906][T19370] netlink: 'syz.1.3571': attribute type 29 has an invalid length. [ 874.449409][T19372] netlink: 'syz.1.3571': attribute type 29 has an invalid length. [ 874.467698][T19370] netlink: 'syz.1.3571': attribute type 29 has an invalid length. [ 874.476869][T19370] netlink: 'syz.1.3571': attribute type 29 has an invalid length. [ 874.515647][T19371] netlink: 'syz.0.3570': attribute type 29 has an invalid length. [ 874.530619][T19371] netlink: 'syz.0.3570': attribute type 29 has an invalid length. [ 874.555326][T19373] netlink: 'syz.0.3570': attribute type 29 has an invalid length. [ 874.594121][T19371] netlink: 'syz.0.3570': attribute type 29 has an invalid length. [ 874.925357][T19396] syzkaller0: entered promiscuous mode [ 874.932520][T19396] syzkaller0: entered allmulticast mode [ 875.043276][T17474] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 877.204865][T19414] __nla_validate_parse: 2 callbacks suppressed [ 877.204878][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'. [ 877.285135][T19417] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3584'. [ 877.297749][T19417] openvswitch: netlink: Flow key attr not present in new flow. [ 877.410849][T19424] netlink: 'syz.0.3586': attribute type 4 has an invalid length. [ 877.432931][T19424] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3586'. [ 877.779053][T19431] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3588'. [ 878.108936][T19439] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3591'. [ 878.653058][T19465] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 878.701566][T19465] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 878.896278][T19467] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3601'. [ 878.955189][T19467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 878.975197][T19473] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3602'. [ 878.991525][T19475] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3602'. [ 879.006275][T19475] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 879.024265][T19475] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 879.173118][T19482] validate_nla: 5 callbacks suppressed [ 879.173131][T19482] netlink: 'syz.1.3605': attribute type 39 has an invalid length. [ 879.189622][T19482] veth0_macvtap: left promiscuous mode [ 879.424524][T19492] syzkaller0: entered promiscuous mode [ 879.430522][T19492] syzkaller0: entered allmulticast mode [ 879.462715][T19489] netlink: 'syz.3.3607': attribute type 10 has an invalid length. [ 879.470891][T19489] netlink: 'syz.3.3607': attribute type 10 has an invalid length. [ 881.979297][T19497] netlink: 'syz.0.3610': attribute type 2 has an invalid length. [ 881.987546][T19497] netlink: 'syz.0.3610': attribute type 8 has an invalid length. [ 881.995883][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3610'. [ 882.006682][T19499] netlink: 'syz.0.3610': attribute type 11 has an invalid length. [ 882.712797][T19541] can: request_module (can-proto-0) failed. [ 883.170260][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 883.204502][T19570] netlink: 'syz.0.3631': attribute type 2 has an invalid length. [ 883.220274][T19570] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3631'. [ 883.252738][T19574] netlink: 'syz.1.3632': attribute type 1 has an invalid length. [ 883.264000][T19574] netlink: 'syz.1.3632': attribute type 4 has an invalid length. [ 883.274291][T19574] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3632'. [ 883.286245][T19573] netlink: 'syz.1.3632': attribute type 1 has an invalid length. [ 883.313399][T19573] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3632'. [ 883.796531][T19590] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3636'. [ 884.277324][T19609] IPv6: NLM_F_CREATE should be specified when creating new route [ 884.315528][T19609] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3641'. [ 884.487345][T19615] validate_nla: 3 callbacks suppressed [ 884.487366][T19615] netlink: 'syz.0.3643': attribute type 21 has an invalid length. [ 884.532533][T19615] IPv6: NLM_F_CREATE should be specified when creating new route [ 884.562638][T19615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 884.569992][T19615] IPv6: NLM_F_CREATE should be set when creating new route [ 884.577407][T19615] IPv6: NLM_F_CREATE should be set when creating new route [ 884.584727][T19615] IPv6: NLM_F_CREATE should be set when creating new route [ 885.035588][T19621] netlink: 'syz.3.3646': attribute type 9 has an invalid length. [ 885.058206][T19621] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3646'. [ 888.217254][T19628] netlink: 'syz.2.3647': attribute type 10 has an invalid length. [ 888.229665][T19628] bond0: (slave bond_slave_0): Releasing backup interface [ 888.250501][T19628] bond_slave_0: left promiscuous mode [ 888.290863][T19623] netlink: 'syz.0.3645': attribute type 1 has an invalid length. [ 888.298803][T19623] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.3645'. [ 888.309425][T19630] netlink: 'syz.3.3646': attribute type 9 has an invalid length. [ 888.328208][T19630] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3646'. [ 888.340018][T19637] netlink: 'syz.1.3648': attribute type 3 has an invalid length. [ 888.359636][T19637] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3648'. [ 888.599710][T19646] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 888.628303][T19646] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3652'. [ 888.686269][T19650] netlink: 'syz.3.3654': attribute type 29 has an invalid length. [ 888.703852][T19650] netlink: 'syz.3.3654': attribute type 29 has an invalid length. [ 888.714387][T19650] netlink: 'syz.3.3654': attribute type 29 has an invalid length. [ 890.042094][T19682] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.3665'. [ 890.067015][T19680] validate_nla: 2 callbacks suppressed [ 890.067052][T19680] netlink: 'syz.0.3664': attribute type 16 has an invalid length. [ 890.090381][T19680] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3664'. [ 890.144107][T19684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.151455][T19684] IPv6: NLM_F_CREATE should be set when creating new route [ 890.158970][T19684] IPv6: NLM_F_CREATE should be set when creating new route [ 890.167431][T19684] IPv6: NLM_F_CREATE should be set when creating new route [ 891.032554][T19709] netlink: 'syz.1.3672': attribute type 10 has an invalid length. [ 891.282010][T19697] can: request_module (can-proto-0) failed. [ 891.657225][T19709] team0: Port device geneve1 added [ 892.062425][T19723] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3676'. [ 892.173466][T19731] netlink: 'syz.2.3677': attribute type 17 has an invalid length. [ 892.198389][T19731] netlink: 'syz.2.3677': attribute type 16 has an invalid length. [ 892.206384][T19731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3677'. [ 893.347420][T19779] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3691'. [ 893.653673][T19791] : port 1(ip6gretap0) entered blocking state [ 893.664976][T19791] : port 1(ip6gretap0) entered disabled state [ 893.679267][T19791] ip6gretap0: entered allmulticast mode [ 893.695912][T19791] ip6gretap0: entered promiscuous mode [ 896.409743][T17474] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 897.831077][T19856] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3713'. [ 898.111409][T19862] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3713'. [ 898.149363][T19862] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3713'. [ 898.186270][T19863] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3714'. [ 898.306140][T19865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3715'. [ 898.481507][T13807] Bluetooth: hci3: command 0x0406 tx timeout [ 899.103824][T19858] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3714'. [ 899.128137][T19861] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3714'. [ 899.155493][T19870] IPv6: Can't replace route, no match found [ 899.656383][T19890] netlink: 'syz.2.3724': attribute type 21 has an invalid length. [ 899.672552][T19890] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3724'. [ 899.689916][T19890] netlink: 'syz.2.3724': attribute type 4 has an invalid length. [ 899.728123][T19890] netlink: 'syz.2.3724': attribute type 3 has an invalid length. [ 899.755078][T19890] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3724'. [ 900.441091][T19902] netlink: 'syz.2.3726': attribute type 4 has an invalid length. [ 901.794663][T13807] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 901.807780][T13807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 901.821367][T13807] CPU: 1 PID: 13807 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 901.829078][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 901.839539][T13807] Workqueue: hci1 hci_rx_work [ 901.844384][T13807] Call Trace: [ 901.847698][T13807] [ 901.850666][T13807] dump_stack_lvl+0x18c/0x250 [ 901.855399][T13807] ? show_regs_print_info+0x20/0x20 [ 901.860640][T13807] ? load_image+0x420/0x420 [ 901.865216][T13807] sysfs_create_dir_ns+0x26e/0x2a0 [ 901.870410][T13807] ? sysfs_warn_dup+0xa0/0xa0 [ 901.875162][T13807] ? do_raw_spin_unlock+0x121/0x230 [ 901.880437][T13807] kobject_add_internal+0x61c/0xcc0 [ 901.885795][T13807] kobject_add+0x164/0x240 [ 901.890358][T13807] ? __rwlock_init+0x150/0x150 [ 901.895197][T13807] ? kobject_init+0x1e0/0x1e0 [ 901.899941][T13807] ? _raw_spin_unlock+0x28/0x40 [ 901.904847][T13807] ? get_device_parent+0x366/0x390 [ 901.910015][T13807] device_add+0x408/0xc20 [ 901.914412][T13807] hci_conn_add_sysfs+0xd5/0x1e0 [ 901.919491][T13807] le_conn_complete_evt+0xf5d/0x1540 [ 901.924850][T13807] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 901.931324][T13807] ? bt_info+0x180/0x180 [ 901.935718][T13807] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 901.941403][T13807] ? skb_pull_data+0xfb/0x200 [ 901.946139][T13807] hci_le_enh_conn_complete_evt+0x189/0x460 [ 901.952107][T13807] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 901.959195][T13807] ? hci_remote_host_features_evt+0x150/0x150 [ 901.965440][T13807] hci_event_packet+0x7ba/0x1270 [ 901.970436][T13807] ? bis_list+0x290/0x290 [ 901.974824][T13807] ? lockdep_hardirqs_on+0x98/0x150 [ 901.980339][T13807] ? hci_send_to_monitor+0xd7/0x4f0 [ 901.985639][T13807] hci_rx_work+0x43a/0xd60 [ 901.990299][T13807] ? process_scheduled_works+0x96f/0x15d0 [ 901.996121][T13807] process_scheduled_works+0xa5d/0x15d0 [ 902.001807][T13807] ? worker_attach_to_pool+0x380/0x380 [ 902.007548][T13807] ? assign_work+0x3d2/0x5d0 [ 902.012251][T13807] worker_thread+0xa55/0xfc0 [ 902.016946][T13807] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 902.022944][T13807] ? _raw_spin_unlock+0x40/0x40 [ 902.027871][T13807] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 902.033904][T13807] kthread+0x2fa/0x390 [ 902.038044][T13807] ? pr_cont_work+0x560/0x560 [ 902.042824][T13807] ? kthread_blkcg+0xd0/0xd0 [ 902.047500][T13807] ret_from_fork+0x48/0x80 [ 902.052011][T13807] ? kthread_blkcg+0xd0/0xd0 [ 902.056772][T13807] ret_from_fork_asm+0x11/0x20 [ 902.061675][T13807] [ 902.075235][T13807] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 902.089768][T13807] Bluetooth: hci1: failed to register connection device [ 902.317011][T19947] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 902.334765][T19947] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3739'. [ 902.795379][T19947] vlan0 (unregistering): left allmulticast mode [ 902.808445][T19947] veth0_vlan (unregistering): left allmulticast mode [ 902.829304][T19947] vlan0 (unregistering): left promiscuous mode [ 902.844642][T19947] À: port 1(vlan0) entered disabled state [ 903.550178][T19965] hsr0: left allmulticast mode [ 903.555463][T19965] hsr_slave_0: left allmulticast mode [ 903.564539][T19965] hsr_slave_1: left allmulticast mode [ 903.579534][T19965] bridge0: port 3(hsr0) entered disabled state [ 903.657961][T19965] bridge_slave_1: left allmulticast mode [ 903.663839][T19965] bridge_slave_1: left promiscuous mode [ 903.676416][T19965] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.694858][T19965] bridge_slave_0: left allmulticast mode [ 903.718709][T19965] bridge_slave_0: left promiscuous mode [ 903.724713][T19965] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.827729][T19965] bond0: (slave bridge0): Releasing backup interface [ 903.847058][T19965] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 904.001676][T19974] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3747'. [ 904.158854][T17474] Bluetooth: hci1: command 0x0406 tx timeout [ 905.445260][T20021] netlink: 'syz.1.3761': attribute type 10 has an invalid length. [ 905.473975][T20021] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 905.493501][T20021] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 906.016829][T20034] netlink: 'syz.0.3765': attribute type 3 has an invalid length. [ 906.028353][T20034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3765'. [ 906.154450][T20036] syzkaller0: entered promiscuous mode [ 906.161896][T20036] syzkaller0: entered allmulticast mode [ 906.204555][T10792] tipc: Subscription rejected, illegal request [ 906.913427][T20060] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3772'. [ 909.093656][T20055] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3771'. [ 909.104109][T20060] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3772'. [ 909.306241][T20070] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3774'. [ 909.682526][T20089] netlink: 'syz.1.3781': attribute type 10 has an invalid length. [ 909.711041][T20089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.732657][T20089] batadv0: entered promiscuous mode [ 909.739355][T20089] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 910.635111][T20123] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3791'. [ 910.659070][T20123] netlink: zone id is out of range [ 910.670021][T20123] netlink: zone id is out of range [ 910.675212][T20123] netlink: zone id is out of range [ 910.857945][T20135] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3796'. [ 911.731975][T20167] netlink: 'syz.1.3803': attribute type 29 has an invalid length. [ 911.775600][T20163] syzkaller0: entered promiscuous mode [ 911.809879][T20163] syzkaller0: entered allmulticast mode [ 911.842579][T20167] netlink: 'syz.1.3803': attribute type 29 has an invalid length. [ 911.879496][T20176] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 915.047280][T20190] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3809'. [ 915.056817][T20190] bridge_slave_1: default FDB implementation only supports local addresses [ 916.585882][T20233] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.3823'. [ 916.931211][T20220] syzkaller0: entered promiscuous mode [ 916.936885][T20220] syzkaller0: entered allmulticast mode [ 917.909860][T20249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3827'. [ 918.723231][T17474] Bluetooth: hci2: command 0x0406 tx timeout [ 920.404984][T20243] netlink: 'syz.1.3825': attribute type 10 has an invalid length. [ 920.413188][T20243] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3825'. [ 920.422595][T20249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3827'. [ 920.596519][T20260] netlink: 'syz.1.3831': attribute type 2 has an invalid length. [ 920.623956][T20260] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3831'. [ 921.911810][T10790] tipc: Subscription rejected, illegal request [ 922.241344][T20303] netlink: 'syz.1.3845': attribute type 10 has an invalid length. [ 922.250108][T20303] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3845'. [ 922.262217][T20303] batadv_slave_1: entered promiscuous mode [ 922.270520][T20303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.280402][T20303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.662747][T20317] netlink: 'syz.1.3849': attribute type 10 has an invalid length. [ 922.793969][T20322] netlink: 'syz.0.3851': attribute type 3 has an invalid length. [ 922.802335][T20322] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3851'. [ 923.455450][T10790] tipc: Subscription rejected, illegal request [ 924.872214][T20362] syzkaller0: entered promiscuous mode [ 924.877793][T20362] syzkaller0: entered allmulticast mode [ 924.890544][T20363] netlink: 'syz.0.3865': attribute type 21 has an invalid length. [ 924.918547][T20363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3865'. [ 927.807779][T20387] netlink: 'syz.1.3872': attribute type 7 has an invalid length. [ 927.820342][T20387] netlink: 'syz.1.3872': attribute type 6 has an invalid length. [ 928.456164][T20394] netlink: 'syz.2.3876': attribute type 17 has an invalid length. [ 928.489015][T20394] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3876'. [ 928.714935][T20405] C: renamed from team_slave_0 (while UP) [ 928.745943][T20405] netlink: 'syz.1.3880': attribute type 3 has an invalid length. [ 928.779881][T20405] netlink: 'syz.1.3880': attribute type 1 has an invalid length. [ 928.787747][T20405] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3880'. [ 928.800116][T20405] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 931.921644][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.929567][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.017872][T20435] netlink: 'syz.1.3889': attribute type 21 has an invalid length. [ 932.039474][T20435] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3889'. [ 932.239331][T20441] netlink: 'syz.1.3891': attribute type 11 has an invalid length. [ 932.247466][T20441] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3891'. [ 932.268585][T20443] netlink: 'syz.1.3891': attribute type 11 has an invalid length. [ 932.288235][T20443] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3891'. [ 932.548676][T20454] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3896'. [ 933.362588][T20480] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3905'. [ 934.697163][T20518] netlink: 'syz.3.3915': attribute type 21 has an invalid length. [ 934.765275][T20518] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3915'. [ 934.836353][T20521] netlink: 'syz.1.3917': attribute type 10 has an invalid length. [ 934.845624][T20521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3917'. [ 934.855401][T20521] team0: entered promiscuous mode [ 934.861765][T20521] C: entered promiscuous mode [ 934.866841][T20521] team_slave_1: entered promiscuous mode [ 934.879501][T20521] geneve1: entered promiscuous mode [ 934.895387][T20521] team0: entered allmulticast mode [ 934.914734][T20521] C: entered allmulticast mode [ 934.925025][T20521] team_slave_1: entered allmulticast mode [ 934.938232][T20521] geneve1: entered allmulticast mode [ 934.954250][T20521] bridge0: port 3(team0) entered blocking state [ 934.970809][T20521] bridge0: port 3(team0) entered disabled state [ 935.004222][T20521] bridge0: port 3(team0) entered blocking state [ 935.010997][T20521] bridge0: port 3(team0) entered forwarding state [ 935.313535][T20530] netlink: 'syz.1.3920': attribute type 1 has an invalid length. [ 935.854245][T20551] pim6reg1: entered promiscuous mode [ 935.874329][T20551] pim6reg1: entered allmulticast mode [ 936.170544][T20559] netlink: 'syz.0.3928': attribute type 9 has an invalid length. [ 936.198285][T20559] netlink: 150408 bytes leftover after parsing attributes in process `syz.0.3928'. [ 936.311479][T20560] netlink: 'syz.0.3928': attribute type 9 has an invalid length. [ 936.332809][T20560] netlink: 190296 bytes leftover after parsing attributes in process `syz.0.3928'. [ 936.752390][T20573] netlink: 'syz.2.3933': attribute type 10 has an invalid length. [ 936.772817][T20573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3933'. [ 937.642434][T20587] netlink: 'syz.0.3938': attribute type 10 has an invalid length. [ 937.652911][T20587] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3938'. [ 937.869092][T20593] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3939'. [ 937.890904][T20593] openvswitch: netlink: Message has 20476 unknown bytes. [ 938.162836][T20600] syzkaller0: mtu less than device minimum [ 938.212993][T20600] syzkaller0: entered allmulticast mode [ 941.217493][T20609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 942.101133][T20630] delete_channel: no stack [ 942.128123][T20635] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.3952'. [ 942.418186][T20632] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3951'. [ 942.427756][T20632] bridge_slave_1: default FDB implementation only supports local addresses [ 943.919580][T20672] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3962'. [ 944.251066][T20686] C: left promiscuous mode [ 944.255859][T20686] C: left allmulticast mode [ 944.284641][T20686] team0: Port device C removed [ 944.303160][T20686] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 944.726380][T20704] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.3971'. [ 944.739967][T20704] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 945.325171][T20731] netlink: 'syz.2.3978': attribute type 27 has an invalid length. [ 945.333268][T20731] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3978'. [ 945.820723][T20739] netlink: 'syz.0.3981': attribute type 3 has an invalid length. [ 945.830762][T20739] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.3981'. [ 946.060746][T20743] netlink: 'syz.1.3982': attribute type 3 has an invalid length. [ 946.857825][T20775] netlink: 'syz.1.3990': attribute type 10 has an invalid length. [ 947.023751][T20775] hsr_slave_0: left promiscuous mode [ 947.035105][T20775] hsr_slave_1: left promiscuous mode [ 947.297388][T20788] netlink: 'syz.3.3991': attribute type 3 has an invalid length. [ 947.327812][T20788] netlink: 98780 bytes leftover after parsing attributes in process `syz.3.3991'. [ 950.477916][T20801] netlink: 'syz.1.3994': attribute type 10 has an invalid length. [ 950.495632][T20801] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.3994'. [ 950.749169][T20812] netlink: 'syz.0.3997': attribute type 10 has an invalid length. [ 950.788946][T20812] team0: Port device netdevsim0 removed [ 950.796391][T20812] batman_adv: batadv0: Adding interface: netdevsim0 [ 950.828110][T20812] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.897030][T20812] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 950.964469][T20806] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3996'. [ 951.863003][T20832] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.4003'. [ 951.888492][T20824] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 951.908316][T20824] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 953.104976][T20859] netlink: 'syz.0.4011': attribute type 29 has an invalid length. [ 953.114939][T20859] netlink: 'syz.0.4011': attribute type 29 has an invalid length. [ 955.757049][T20920] netlink: 'syz.3.4030': attribute type 10 has an invalid length. [ 955.772120][T20920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4030'. [ 957.026583][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4037'. [ 957.799994][T20962] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 957.811432][T20962] netlink: 'syz.1.4042': attribute type 29 has an invalid length. [ 958.521661][T20972] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.4046'. [ 958.679678][T20969] delete_channel: no stack [ 959.066427][T20983] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4049'. [ 959.099817][T20983] openvswitch: netlink: Message has 20476 unknown bytes. [ 959.132832][T20985] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 959.901749][T21006] netlink: 'syz.2.4056': attribute type 29 has an invalid length. [ 959.924605][T21006] netlink: 'syz.2.4056': attribute type 29 has an invalid length. [ 960.601435][T21021] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.4068'. [ 960.837180][T21025] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4062'. [ 963.211144][T21055] netlink: 'syz.3.4075': attribute type 3 has an invalid length. [ 963.238890][T21055] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4075'. [ 963.586751][T21069] netlink: 'syz.0.4079': attribute type 3 has an invalid length. [ 963.597519][T21069] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4079'. [ 963.716102][T21081] netlink: 'syz.1.4082': attribute type 13 has an invalid length. [ 963.725653][T21081] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4082'. [ 963.751494][T21081] erspan0: refused to change device tx_queue_len [ 963.764940][T21081] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 963.951981][T21092] netlink: 'syz.1.4084': attribute type 9 has an invalid length. [ 963.990426][T21092] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4084'. [ 966.907173][T21115] netlink: 'syz.0.4092': attribute type 49 has an invalid length. [ 967.217548][T21127] netlink: 'syz.3.4095': attribute type 19 has an invalid length. [ 967.226418][T21127] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4095'. [ 967.328764][T21133] netlink: 'syz.2.4097': attribute type 21 has an invalid length. [ 967.437163][T21133] netlink: 'syz.2.4097': attribute type 10 has an invalid length. [ 967.476768][T21133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4097'. [ 967.507225][T21136] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4097'. [ 967.690106][T21138] netlink: 'syz.0.4099': attribute type 16 has an invalid length. [ 967.703605][T21138] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4099'. [ 968.066388][T21146] netlink: 'syz.1.4103': attribute type 9 has an invalid length. [ 968.077233][T21146] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4103'. [ 968.146059][T21148] : port 1(ip6gretap0) entered blocking state [ 968.153285][T21148] : port 1(ip6gretap0) entered disabled state [ 968.174914][T21148] ip6gretap0: entered allmulticast mode [ 968.251064][T21148] ip6gretap0: entered promiscuous mode [ 968.295147][T21154] ip6gretap0: left allmulticast mode [ 968.323395][T21154] ip6gretap0: left promiscuous mode [ 968.354728][T21154] : port 1(ip6gretap0) entered disabled state [ 968.434378][T21159] netlink: 'syz.2.4106': attribute type 10 has an invalid length. [ 968.446359][T21159] netlink: 'syz.2.4106': attribute type 2 has an invalid length. [ 968.468076][T21159] netlink: 'syz.2.4106': attribute type 8 has an invalid length. [ 968.476005][T21159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4106'. [ 968.774888][T21157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 970.788271][T21167] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4108'. [ 971.207601][T21188] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4115'. [ 971.802915][T21214] netlink: 'syz.1.4124': attribute type 21 has an invalid length. [ 971.811164][T21214] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4124'. [ 972.150893][T21222] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4127'. [ 972.877891][T21250] netlink: 'syz.1.4136': attribute type 10 has an invalid length. [ 972.909763][T21250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4136'. [ 972.934309][T21250] vcan0: entered promiscuous mode [ 972.946429][T21250] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 972.987147][T21252] netlink: 'syz.1.4136': attribute type 10 has an invalid length. [ 973.011327][T21252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4136'. [ 973.020845][T21252] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 973.354132][T21266] netlink: 'syz.0.4140': attribute type 10 has an invalid length. [ 973.427435][T21266] team0: Port device geneve1 added [ 973.435150][T21269] netlink: 'syz.0.4140': attribute type 10 has an invalid length. [ 973.454890][T21274] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4144'. [ 974.765304][T21310] netlink: 'syz.3.4157': attribute type 29 has an invalid length. [ 974.774229][T21310] netlink: 'syz.3.4157': attribute type 3 has an invalid length. [ 974.812532][T21310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4157'. [ 977.797092][T21355] netlink: 'syz.3.4169': attribute type 1 has an invalid length. [ 979.078381][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4174'. [ 979.467503][T21396] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4179'. [ 979.487145][T21395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4180'. [ 979.550114][T21395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4180'. [ 979.697300][T21395] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4180'. [ 980.501763][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4185'. [ 980.991855][T21412] IPv6: Can't replace route, no match found [ 981.771734][T21432] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4189'. [ 982.242172][T21435] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 982.247873][T21435] dvmrp1: linktype set to 804 [ 982.882527][T21447] netlink: 'syz.2.4192': attribute type 29 has an invalid length. [ 983.127583][T21447] netlink: 'syz.2.4192': attribute type 29 has an invalid length. [ 983.299083][T21448] sock: sock_timestamping_bind_phc: sock not bind to device [ 983.802545][T21464] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4197'. [ 986.125645][T21515] pim6reg1: entered promiscuous mode [ 986.132829][T21515] pim6reg1: entered allmulticast mode [ 986.455915][T21534] netlink: 'syz.2.4222': attribute type 4 has an invalid length. [ 986.466331][T21534] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.4222'. [ 986.833211][T21545] netlink: 'syz.0.4224': attribute type 9 has an invalid length. [ 986.898207][T21545] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4224'. [ 987.777425][T21565] netlink: 'syz.1.4230': attribute type 27 has an invalid length. [ 987.799473][T21565] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.4230'. [ 988.144520][T21580] netlink: 'syz.3.4233': attribute type 30 has an invalid length. [ 989.088110][T21602] netlink: 'syz.1.4238': attribute type 13 has an invalid length. [ 989.131628][T21604] netlink: 'syz.1.4238': attribute type 21 has an invalid length. [ 990.539211][T21645] netlink: set zone limit has 8 unknown bytes [ 990.737448][T21651] netlink: 'syz.1.4256': attribute type 21 has an invalid length. [ 990.746147][T21651] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 990.754951][T21651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4256'. [ 990.983536][T21654] netlink: 'syz.3.4257': attribute type 2 has an invalid length. [ 991.013454][T21654] netlink: 'syz.3.4257': attribute type 1 has an invalid length. [ 991.044805][T21654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4257'. [ 991.829208][T21668] netlink: 'syz.0.4262': attribute type 9 has an invalid length. [ 991.837033][T21668] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4262'. [ 993.428409][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.435031][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.001130][T21719] netlink: 'syz.0.4278': attribute type 3 has an invalid length. [ 994.038179][T21719] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4278'. [ 994.772728][T21730] netlink: 'syz.1.4283': attribute type 1 has an invalid length. [ 994.788152][T21730] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.4283'. [ 995.088747][T21742] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.4286'. [ 995.477484][T21767] netlink: 'syz.1.4294': attribute type 10 has an invalid length. [ 995.838905][T21778] netlink: 'syz.3.4298': attribute type 21 has an invalid length. [ 995.846890][T21778] netlink: 'syz.3.4298': attribute type 1 has an invalid length. [ 995.868799][T21778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4298'. [ 995.966570][T21783] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4306'. [ 997.133722][T21797] netlink: 'syz.3.4302': attribute type 10 has an invalid length. [ 997.154702][T21797] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4302'. [ 997.312087][T21808] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.4307'. [ 997.323749][T21809] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4305'. [ 997.390194][T21809] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 997.703079][T21823] netlink: 'syz.2.4312': attribute type 21 has an invalid length. [ 997.713072][T21823] netlink: 'syz.2.4312': attribute type 1 has an invalid length. [ 997.721343][T21823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4312'. [ 997.732125][T21824] netlink: 'syz.3.4313': attribute type 10 has an invalid length. [ 998.056867][T21830] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4315'. [ 998.088611][T21830] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 998.169642][T21832] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4316'. [ 998.315127][T21832] netlink: zone id is out of range [ 998.428184][T21832] netlink: zone id is out of range [ 998.494619][T21832] netlink: zone id is out of range [ 998.588429][T21832] netlink: zone id is out of range [ 998.649051][T21832] netlink: zone id is out of range [ 998.706647][T21834] netlink: 'syz.0.4317': attribute type 3 has an invalid length. [ 998.715639][T21832] netlink: zone id is out of range [ 998.715659][T21832] netlink: zone id is out of range [ 998.715669][T21832] netlink: zone id is out of range [ 998.715679][T21832] netlink: zone id is out of range [ 999.278311][T21849] validate_nla: 1 callbacks suppressed [ 999.278329][T21849] netlink: 'syz.0.4322': attribute type 1 has an invalid length. [ 999.297592][T21849] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.4322'. [ 999.356402][T21849] netlink: 'syz.0.4322': attribute type 1 has an invalid length. [ 999.916132][T21861] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1000.094092][T21876] sctp: [Deprecated]: syz.2.4330 (pid 21876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1000.094092][T21876] Use struct sctp_sack_info instead [ 1001.178471][T21925] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1001.190767][T21927] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1002.336160][T21951] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1002.464970][T21956] FAULT_INJECTION: forcing a failure. [ 1002.464970][T21956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.486235][T21956] CPU: 1 PID: 21956 Comm: syz.3.4357 Not tainted syzkaller #0 [ 1002.493774][T21956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1002.503858][T21956] Call Trace: [ 1002.507153][T21956] [ 1002.510107][T21956] dump_stack_lvl+0x18c/0x250 [ 1002.514820][T21956] ? show_regs_print_info+0x20/0x20 [ 1002.520054][T21956] ? load_image+0x420/0x420 [ 1002.524655][T21956] ? __might_fault+0xaa/0x120 [ 1002.529354][T21956] ? __lock_acquire+0x7d40/0x7d40 [ 1002.534501][T21956] should_fail_ex+0x39d/0x4d0 [ 1002.539212][T21956] _copy_to_user+0x2f/0xa0 [ 1002.543662][T21956] bpf_prog_test_run_raw_tp+0x4ca/0x660 [ 1002.549252][T21956] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 1002.554790][T21956] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 1002.560269][T21956] bpf_prog_test_run+0x321/0x390 [ 1002.565312][T21956] __sys_bpf+0x49d/0x890 [ 1002.570023][T21956] ? bpf_link_show_fdinfo+0x390/0x390 [ 1002.575414][T21956] ? lock_chain_count+0x20/0x20 [ 1002.580294][T21956] __x64_sys_bpf+0x7c/0x90 [ 1002.584753][T21956] do_syscall_64+0x55/0xa0 [ 1002.589203][T21956] ? clear_bhb_loop+0x40/0x90 [ 1002.593907][T21956] ? clear_bhb_loop+0x40/0x90 [ 1002.598631][T21956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.604649][T21956] RIP: 0033:0x7fe1bab9c819 [ 1002.609068][T21956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.628964][T21956] RSP: 002b:00007fe1bba58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1002.637417][T21956] RAX: ffffffffffffffda RBX: 00007fe1bae15fa0 RCX: 00007fe1bab9c819 [ 1002.645410][T21956] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1002.653404][T21956] RBP: 00007fe1bba58090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.661391][T21956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.669473][T21956] R13: 00007fe1bae16038 R14: 00007fe1bae15fa0 R15: 00007ffd31d1e138 [ 1002.677645][T21956] [ 1002.892387][T21967] hsr0: left allmulticast mode [ 1002.900997][T21967] hsr_slave_0: left allmulticast mode [ 1002.907609][T21967] hsr_slave_1: left allmulticast mode [ 1002.914985][T21967] bridge0: port 3(hsr0) entered disabled state [ 1002.955623][T21967] bridge_slave_1: left allmulticast mode [ 1002.962529][T21967] bridge_slave_1: left promiscuous mode [ 1002.974128][T21967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.036092][T21967] bridge_slave_0: left allmulticast mode [ 1003.044848][T21967] bridge_slave_0: left promiscuous mode [ 1003.053853][T21967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.112015][T21975] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1003.122396][T21975] net_ratelimit: 217 callbacks suppressed [ 1003.122410][T21975] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 1003.427066][T21973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1003.574426][T21979] netlink: 'syz.1.4366': attribute type 17 has an invalid length. [ 1003.585280][T21979] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4366'. [ 1003.597004][T21979] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1005.660999][T22017] netlink: 'syz.1.4376': attribute type 3 has an invalid length. [ 1005.688063][T22017] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.4376'. [ 1005.843781][T22025] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4380'. [ 1005.855901][T22025] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1006.350346][T22048] ================================================================== [ 1006.358490][T22048] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1006.363919][T22047] netlink: 'syz.0.4387': attribute type 27 has an invalid length. [ 1006.366416][T22048] Write of size 72 at addr ffff888078108a10 by task syz.1.4385/22048 [ 1006.366442][T22048] [ 1006.366450][T22048] CPU: 1 PID: 22048 Comm: syz.1.4385 Not tainted syzkaller #0 [ 1006.366469][T22048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1006.366480][T22048] Call Trace: [ 1006.366490][T22048] [ 1006.366501][T22048] dump_stack_lvl+0x18c/0x250 [ 1006.366537][T22048] ? __lock_acquire+0x7d40/0x7d40 [ 1006.366563][T22048] ? show_regs_print_info+0x20/0x20 [ 1006.366592][T22048] ? load_image+0x420/0x420 [ 1006.366618][T22048] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1006.366644][T22048] ? __virt_addr_valid+0x18c/0x540 [ 1006.366670][T22048] ? __virt_addr_valid+0x469/0x540 [ 1006.366744][T22048] print_report+0xa8/0x210 [ 1006.366771][T22048] ? __bpf_get_stackid+0x6bf/0x900 [ 1006.366794][T22048] kasan_report+0x117/0x150 [ 1006.366821][T22048] ? __bpf_get_stackid+0x6bf/0x900 [ 1006.366854][T22048] kasan_check_range+0x241/0x290 [ 1006.366877][T22048] ? __bpf_get_stackid+0x6bf/0x900 [ 1006.366901][T22048] __asan_memcpy+0x40/0x70 [ 1006.366928][T22048] __bpf_get_stackid+0x6bf/0x900 [ 1006.366961][T22048] bpf_get_stackid_pe+0x343/0x410 [ 1006.366992][T22048] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1006.367015][T22048] bpf_overflow_handler+0x1fc/0x510 [ 1006.367045][T22048] ? bpf_overflow_handler+0xde/0x510 [ 1006.367072][T22048] ? tp_perf_event_destroy+0x20/0x20 [ 1006.367097][T22048] ? perf_trace_preemptirq_template+0x144/0x330 [ 1006.367131][T22048] ? __perf_event_account_interrupt+0x187/0x280 [ 1006.367156][T22048] __perf_event_overflow+0x447/0x630 [ 1006.367186][T22048] perf_swevent_event+0x319/0x570 [ 1006.367211][T22048] ? perf_tp_event+0x1520/0x1520 [ 1006.367234][T22048] ? perf_tp_event+0x13d7/0x1520 [ 1006.367264][T22048] ___perf_sw_event+0x4a7/0x730 [ 1006.367289][T22048] ? ___perf_sw_event+0x199/0x730 [ 1006.367311][T22048] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1006.367342][T22048] ? rep_movs_alternative+0x4a/0x90 [ 1006.367380][T22048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1006.367405][T22048] ? lockdep_hardirqs_on+0x98/0x150 [ 1006.367429][T22048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1006.367459][T22048] __perf_sw_event+0x139/0x270 [ 1006.367486][T22048] do_user_addr_fault+0x123e/0x12c0 [ 1006.367517][T22048] ? rcu_is_watching+0x15/0xb0 [ 1006.367546][T22048] exc_page_fault+0x64/0x100 [ 1006.367571][T22048] asm_exc_page_fault+0x26/0x30 [ 1006.367594][T22048] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1006.367615][T22048] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1006.367632][T22048] RSP: 0018:ffffc900030c7938 EFLAGS: 00050202 [ 1006.367650][T22048] RAX: ffffffff8427e301 RBX: 00000000000082d7 RCX: 00000000000062d7 [ 1006.367665][T22048] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc90002e20000 [ 1006.367679][T22048] RBP: ffffc900030c7a90 R08: ffffc90002e262d6 R09: 1ffff920005c4c5a [ 1006.367693][T22048] R10: dffffc0000000000 R11: fffff520005c4c5b R12: ffffc90002e1e000 [ 1006.367716][T22048] R13: 0000200000000000 R14: ffffc900030c7c18 R15: 1ffff92000618f83 [ 1006.367738][T22048] ? _copy_from_iter+0x181/0x12e0 [ 1006.367776][T22048] _copy_from_iter+0x24e/0x12e0 [ 1006.367805][T22048] ? find_vmap_area+0xfc/0x110 [ 1006.367830][T22048] ? __lock_acquire+0x7d40/0x7d40 [ 1006.367859][T22048] ? copyout_mc+0x70/0x70 [ 1006.367884][T22048] ? do_raw_spin_unlock+0x121/0x230 [ 1006.367920][T22048] ? _raw_spin_unlock+0x28/0x40 [ 1006.367942][T22048] ? find_vmap_area+0xfc/0x110 [ 1006.367968][T22048] ? __check_object_size+0x506/0xa20 [ 1006.367993][T22048] netlink_sendmsg+0x76b/0xbf0 [ 1006.368030][T22048] ? netlink_getsockopt+0x590/0x590 [ 1006.368061][T22048] ? aa_sock_msg_perm+0x94/0x150 [ 1006.368088][T22048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1006.368112][T22048] ? security_socket_sendmsg+0x80/0xa0 [ 1006.368137][T22048] sock_write_iter+0x2df/0x420 [ 1006.368163][T22048] ? sock_read_iter+0x3e0/0x3e0 [ 1006.368195][T22048] ? common_file_perm+0x198/0x1f0 [ 1006.368228][T22048] vfs_write+0x46c/0x990 [ 1006.368260][T22048] ? file_end_write+0x250/0x250 [ 1006.368290][T22048] ? __fget_files+0x43d/0x4b0 [ 1006.368324][T22048] ? __fdget_pos+0x1d8/0x330 [ 1006.368348][T22048] ? ksys_write+0x75/0x260 [ 1006.368376][T22048] ksys_write+0x150/0x260 [ 1006.368403][T22048] ? __ia32_sys_read+0x90/0x90 [ 1006.368433][T22048] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1006.368460][T22048] do_syscall_64+0x55/0xa0 [ 1006.368477][T22048] ? clear_bhb_loop+0x40/0x90 [ 1006.368499][T22048] ? clear_bhb_loop+0x40/0x90 [ 1006.368524][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.368547][T22048] RIP: 0033:0x7f834559c819 [ 1006.368565][T22048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.368581][T22048] RSP: 002b:00007f8346524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1006.368601][T22048] RAX: ffffffffffffffda RBX: 00007f8345816090 RCX: 00007f834559c819 [ 1006.368616][T22048] RDX: 00000000000082d7 RSI: 0000200000000000 RDI: 0000000000000012 [ 1006.368628][T22048] RBP: 00007f8345632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.368641][T22048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.368653][T22048] R13: 00007f8345816128 R14: 00007f8345816090 R15: 00007ffd6a629218 [ 1006.368683][T22048] [ 1006.368691][T22048] [ 1006.368695][T22048] Allocated by task 22048: [ 1006.368714][T22048] kasan_set_track+0x4e/0x70 [ 1006.368736][T22048] __kasan_kmalloc+0x8f/0xa0 [ 1006.368755][T22048] __kmalloc_node+0xb4/0x230 [ 1006.368779][T22048] bpf_map_area_alloc+0x5e/0x110 [ 1006.368804][T22048] prealloc_elems_and_freelist+0x86/0x1c0 [ 1006.368825][T22048] stack_map_alloc+0x33a/0x4c0 [ 1006.368846][T22048] map_create+0x877/0x12f0 [ 1006.368863][T22048] __sys_bpf+0x651/0x890 [ 1006.368880][T22048] __x64_sys_bpf+0x7c/0x90 [ 1006.368896][T22048] do_syscall_64+0x55/0xa0 [ 1006.368911][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.368933][T22048] [ 1006.368937][T22048] Last potentially related work creation: [ 1006.368943][T22048] kasan_save_stack+0x3e/0x60 [ 1006.368962][T22048] __kasan_record_aux_stack+0xaf/0xc0 [ 1006.368984][T22048] call_rcu+0x153/0x950 [ 1006.369015][T22048] nf_unregister_net_hooks+0xcb/0x130 [ 1006.369036][T22048] setup_net+0x7e7/0xa30 [ 1006.369058][T22048] copy_net_ns+0x36d/0x5e0 [ 1006.369081][T22048] create_new_namespaces+0x3d3/0x6f0 [ 1006.369100][T22048] copy_namespaces+0x430/0x4a0 [ 1006.369120][T22048] copy_process+0x1724/0x3d80 [ 1006.369138][T22048] kernel_clone+0x24b/0x8a0 [ 1006.369156][T22048] __x64_sys_clone+0x1b7/0x230 [ 1006.369174][T22048] do_syscall_64+0x55/0xa0 [ 1006.369189][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.369210][T22048] [ 1006.369214][T22048] Second to last potentially related work creation: [ 1006.369220][T22048] kasan_save_stack+0x3e/0x60 [ 1006.369239][T22048] __kasan_record_aux_stack+0xaf/0xc0 [ 1006.369261][T22048] call_rcu+0x153/0x950 [ 1006.369282][T22048] __nf_register_net_hook+0x788/0x910 [ 1006.369302][T22048] nf_register_net_hook+0xb2/0x190 [ 1006.369322][T22048] nf_register_net_hooks+0x44/0x1b0 [ 1006.369341][T22048] nf_ct_netns_do_get+0x3c0/0x5c0 [ 1006.369363][T22048] nf_ct_netns_inet_get+0x1f/0x150 [ 1006.369384][T22048] nf_conncount_init+0x127/0x380 [ 1006.369401][T22048] ovs_ct_init+0x316/0x490 [ 1006.369421][T22048] ovs_init_net+0x1e6/0x250 [ 1006.369442][T22048] ops_init+0x397/0x640 [ 1006.369466][T22048] setup_net+0x3b6/0xa30 [ 1006.369489][T22048] copy_net_ns+0x36d/0x5e0 [ 1006.369511][T22048] create_new_namespaces+0x3d3/0x6f0 [ 1006.369530][T22048] copy_namespaces+0x430/0x4a0 [ 1006.369549][T22048] copy_process+0x1724/0x3d80 [ 1006.369567][T22048] kernel_clone+0x24b/0x8a0 [ 1006.369584][T22048] __x64_sys_clone+0x1b7/0x230 [ 1006.369602][T22048] do_syscall_64+0x55/0xa0 [ 1006.369617][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.369636][T22048] [ 1006.369640][T22048] The buggy address belongs to the object at ffff888078108a00 [ 1006.369640][T22048] which belongs to the cache kmalloc-cg-64 of size 64 [ 1006.369655][T22048] The buggy address is located 16 bytes inside of [ 1006.369655][T22048] allocated 40-byte region [ffff888078108a00, ffff888078108a28) [ 1006.369675][T22048] [ 1006.369679][T22048] The buggy address belongs to the physical page: [ 1006.369688][T22048] page:ffffea0001e04200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78108 [ 1006.369715][T22048] memcg:ffff88802db22801 [ 1006.369722][T22048] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1006.369739][T22048] page_type: 0xffffffff() [ 1006.369756][T22048] raw: 00fff00000000800 ffff888017c4da00 ffffea0000905040 dead000000000003 [ 1006.369773][T22048] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802db22801 [ 1006.369783][T22048] page dumped because: kasan: bad access detected [ 1006.369792][T22048] page_owner tracks the page as allocated [ 1006.369798][T22048] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5770, tgid 5770 (syz-executor), ts 312451649715, free_ts 312451161094 [ 1006.369830][T22048] post_alloc_hook+0x1c1/0x200 [ 1006.369856][T22048] get_page_from_freelist+0x1951/0x19e0 [ 1006.369872][T22048] __alloc_pages+0x1f0/0x460 [ 1006.369888][T22048] alloc_slab_page+0x5d/0x160 [ 1006.369904][T22048] new_slab+0x87/0x2d0 [ 1006.369918][T22048] ___slab_alloc+0xc5d/0x12f0 [ 1006.369943][T22048] __kmem_cache_alloc_node+0x19e/0x250 [ 1006.369969][T22048] kmalloc_trace+0x2a/0xe0 [ 1006.369991][T22048] alloc_fdtable+0xca/0x2c0 [ 1006.370011][T22048] dup_fd+0x786/0xa50 [ 1006.370031][T22048] copy_files+0xc3/0x120 [ 1006.370048][T22048] copy_process+0x15ab/0x3d80 [ 1006.370064][T22048] kernel_clone+0x24b/0x8a0 [ 1006.370082][T22048] __x64_sys_clone+0x1b7/0x230 [ 1006.370101][T22048] do_syscall_64+0x55/0xa0 [ 1006.370116][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.370137][T22048] page last free stack trace: [ 1006.370144][T22048] free_unref_page_prepare+0x7b2/0x8c0 [ 1006.370169][T22048] free_unref_page+0x32/0x2e0 [ 1006.370193][T22048] vfree+0x1a6/0x320 [ 1006.370213][T22048] __do_replace+0x858/0x990 [ 1006.370233][T22048] do_ip6t_set_ctl+0xb48/0xe10 [ 1006.370251][T22048] nf_setsockopt+0x263/0x280 [ 1006.370272][T22048] do_sock_setsockopt+0x175/0x1a0 [ 1006.370289][T22048] __x64_sys_setsockopt+0x182/0x200 [ 1006.370306][T22048] do_syscall_64+0x55/0xa0 [ 1006.370319][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.370340][T22048] [ 1006.370344][T22048] Memory state around the buggy address: [ 1006.370354][T22048] ffff888078108900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1006.370366][T22048] ffff888078108980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1006.370379][T22048] >ffff888078108a00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1006.370388][T22048] ^ [ 1006.370397][T22048] ffff888078108a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1006.370410][T22048] ffff888078108b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1006.370419][T22048] ================================================================== [ 1006.370430][T22048] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1006.370437][T22048] CPU: 1 PID: 22048 Comm: syz.1.4385 Not tainted syzkaller #0 [ 1006.370454][T22048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1006.370464][T22048] Call Trace: [ 1006.370473][T22048] [ 1006.370481][T22048] dump_stack_lvl+0x18c/0x250 [ 1006.370511][T22048] ? show_regs_print_info+0x20/0x20 [ 1006.370540][T22048] ? load_image+0x420/0x420 [ 1006.370577][T22048] panic+0x2dc/0x730 [ 1006.370599][T22048] ? __lock_acquire+0x7d40/0x7d40 [ 1006.370624][T22048] ? bpf_jit_dump+0xd0/0xd0 [ 1006.370654][T22048] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1006.370676][T22048] ? _raw_spin_unlock+0x40/0x40 [ 1006.370711][T22048] ? __bpf_get_stackid+0x6bf/0x900 [ 1006.370733][T22048] check_panic_on_warn+0x84/0xa0 [ 1006.370756][T22048] ? __bpf_get_stackid+0x6bf/0x900 [ 1006.370777][T22048] end_report+0x6f/0x130 [ 1006.370798][T22048] kasan_report+0x128/0x150 [ 1006.370822][T22048] ? __bpf_get_stackid+0x6bf/0x900 [ 1006.370853][T22048] kasan_check_range+0x241/0x290 [ 1006.370875][T22048] ? __bpf_get_stackid+0x6bf/0x900 [ 1006.370898][T22048] __asan_memcpy+0x40/0x70 [ 1006.370926][T22048] __bpf_get_stackid+0x6bf/0x900 [ 1006.370958][T22048] bpf_get_stackid_pe+0x343/0x410 [ 1006.370988][T22048] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1006.371009][T22048] bpf_overflow_handler+0x1fc/0x510 [ 1006.371039][T22048] ? bpf_overflow_handler+0xde/0x510 [ 1006.371064][T22048] ? tp_perf_event_destroy+0x20/0x20 [ 1006.371088][T22048] ? perf_trace_preemptirq_template+0x144/0x330 [ 1006.371122][T22048] ? __perf_event_account_interrupt+0x187/0x280 [ 1006.371146][T22048] __perf_event_overflow+0x447/0x630 [ 1006.371174][T22048] perf_swevent_event+0x319/0x570 [ 1006.371198][T22048] ? perf_tp_event+0x1520/0x1520 [ 1006.371220][T22048] ? perf_tp_event+0x13d7/0x1520 [ 1006.371249][T22048] ___perf_sw_event+0x4a7/0x730 [ 1006.371273][T22048] ? ___perf_sw_event+0x199/0x730 [ 1006.371294][T22048] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1006.371323][T22048] ? rep_movs_alternative+0x4a/0x90 [ 1006.371361][T22048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1006.371385][T22048] ? lockdep_hardirqs_on+0x98/0x150 [ 1006.371407][T22048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1006.371436][T22048] __perf_sw_event+0x139/0x270 [ 1006.371461][T22048] do_user_addr_fault+0x123e/0x12c0 [ 1006.371491][T22048] ? rcu_is_watching+0x15/0xb0 [ 1006.371520][T22048] exc_page_fault+0x64/0x100 [ 1006.371544][T22048] asm_exc_page_fault+0x26/0x30 [ 1006.371564][T22048] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1006.371582][T22048] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1006.371598][T22048] RSP: 0018:ffffc900030c7938 EFLAGS: 00050202 [ 1006.371614][T22048] RAX: ffffffff8427e301 RBX: 00000000000082d7 RCX: 00000000000062d7 [ 1006.371627][T22048] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffffc90002e20000 [ 1006.371640][T22048] RBP: ffffc900030c7a90 R08: ffffc90002e262d6 R09: 1ffff920005c4c5a [ 1006.371653][T22048] R10: dffffc0000000000 R11: fffff520005c4c5b R12: ffffc90002e1e000 [ 1006.371667][T22048] R13: 0000200000000000 R14: ffffc900030c7c18 R15: 1ffff92000618f83 [ 1006.371688][T22048] ? _copy_from_iter+0x181/0x12e0 [ 1006.371731][T22048] _copy_from_iter+0x24e/0x12e0 [ 1006.371757][T22048] ? find_vmap_area+0xfc/0x110 [ 1006.371782][T22048] ? __lock_acquire+0x7d40/0x7d40 [ 1006.371809][T22048] ? copyout_mc+0x70/0x70 [ 1006.371833][T22048] ? do_raw_spin_unlock+0x121/0x230 [ 1006.371860][T22048] ? _raw_spin_unlock+0x28/0x40 [ 1006.371880][T22048] ? find_vmap_area+0xfc/0x110 [ 1006.371905][T22048] ? __check_object_size+0x506/0xa20 [ 1006.371928][T22048] netlink_sendmsg+0x76b/0xbf0 [ 1006.371964][T22048] ? netlink_getsockopt+0x590/0x590 [ 1006.371994][T22048] ? aa_sock_msg_perm+0x94/0x150 [ 1006.372019][T22048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1006.372041][T22048] ? security_socket_sendmsg+0x80/0xa0 [ 1006.372065][T22048] sock_write_iter+0x2df/0x420 [ 1006.372089][T22048] ? sock_read_iter+0x3e0/0x3e0 [ 1006.372119][T22048] ? common_file_perm+0x198/0x1f0 [ 1006.372151][T22048] vfs_write+0x46c/0x990 [ 1006.372180][T22048] ? file_end_write+0x250/0x250 [ 1006.372209][T22048] ? __fget_files+0x43d/0x4b0 [ 1006.372242][T22048] ? __fdget_pos+0x1d8/0x330 [ 1006.372264][T22048] ? ksys_write+0x75/0x260 [ 1006.372291][T22048] ksys_write+0x150/0x260 [ 1006.372317][T22048] ? __ia32_sys_read+0x90/0x90 [ 1006.372345][T22048] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1006.372371][T22048] do_syscall_64+0x55/0xa0 [ 1006.372388][T22048] ? clear_bhb_loop+0x40/0x90 [ 1006.372410][T22048] ? clear_bhb_loop+0x40/0x90 [ 1006.372433][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.372453][T22048] RIP: 0033:0x7f834559c819 [ 1006.372468][T22048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.372484][T22048] RSP: 002b:00007f8346524028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1006.372502][T22048] RAX: ffffffffffffffda RBX: 00007f8345816090 RCX: 00007f834559c819 [ 1006.372515][T22048] RDX: 00000000000082d7 RSI: 0000200000000000 RDI: 0000000000000012 [ 1006.372527][T22048] RBP: 00007f8345632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1006.372538][T22048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.372550][T22048] R13: 00007f8345816128 R14: 00007f8345816090 R15: 00007ffd6a629218 [ 1006.372578][T22048] [ 1006.373061][T22048] Kernel Offset: disabled