last executing test programs: 5.897851446s ago: executing program 2 (id=1664): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) recvmsg$kcm(r0, 0x0, 0x10182) recvmsg$kcm(r0, 0x0, 0x40000100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() sendmsg$unix(r1, &(0x7f0000001300)={&(0x7f0000000c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000e80)="7393a636aa9d61a257fe86a7f10cfdd6d39ab251b167e86ba8861eb0ac0664eb9229b5bf94e8de371591654265c10a442ec7d8424fc888064c544a83551b4785c9aaeb3e", 0x44}, {&(0x7f0000000f40)="0f220196d791e21f216c40b7f503fa6323c1c032fcfed86f801e4a07649b5bfca3f4848ac56eb8a4b8361eeff9d9436b64cf5a499bab1aaee172f109fd0be4c8a8ea7ea84b5d2cad35feeaab43c788f2c3b6ebf54103b9409d47fd35428d728faa99e3614768b30af0e70f4da1c2c6e35f4849464eaf8c97ea3ea900f4f925d0740d7e9b511cbb6b077c9c6c2affa0d531e64204d040161838768a44353286ca42d641adfbc0", 0xa6}, {&(0x7f0000001000)="cb9df53e088cf57360d720c2b93175852c84ff5a9b5bd9697e948be2db5def30e51a7f781606f104408b7d09ce5cbce8e3d3a9f0b4a5f25e56b1d27acc278822ac0030952f491f0b8129973681ad81b837329f4757d61abe5a273d2b6ed4c7f8835e23cfe5d5f2592c343a4971d04171c157069e36e74a31953bfebb28b4eeb15a58c1ec78daa484329607252458d5cbc123bdac8fdd9aef520ed05db8f8aa80d3fcdb3b0b425b12e1362c5ddcacbe6e8364354d564ab09d4ecfd78d953561c321f5c63b8b6e7d81e3cd473a325a1191a292e9331ef0701c7cbc27b9db3448d6f1a2e776d2a55e7925249746dd43813208b699", 0xf3}, {&(0x7f0000001100)}], 0x4, 0x0, 0x40, 0x20000080}, 0x800) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x6, 0x0, 0x5, 0x382, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x4, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)="b8d3d8e48974aae503987f886746be1d81a34f42df271fd6b9aa6701365ffc72380000000001000000fcf2fbb003c377a04d3f44e3f9bafec64080b6972d0fd0aa122541114e556cb441de0fd2e4ce235e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f900"/155, 0x9b}, {&(0x7f0000000b00)="88a023f2ab88a87761772a73920e81c63c239eeec26c45d815d7", 0x1a}], 0x2, 0x0, 0x0, 0x400c815}, 0xc040) close(r5) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x6}, 0x8000005) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/189, 0xbd}], 0x5}, 0x100) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) 5.096762431s ago: executing program 3 (id=1667): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x500}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 4.585267406s ago: executing program 2 (id=1670): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638977fbac141416ac14141683189f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 3.665752989s ago: executing program 2 (id=1674): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000480)=r1, 0x4) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x50, 0x3fff8000}, 0xa00a, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r3, 0x0, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 3.495742851s ago: executing program 3 (id=1677): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xfffffff9}, 0xc) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x0, 0x6, 0x11000, r1, 0x29feb44e, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, @void, @value, @value=r2}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r4, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x35, &(0x7f00000005c0), 0x4) r5 = socket$kcm(0x29, 0x7, 0x0) sendmsg$sock(r5, &(0x7f00000003c0)={&(0x7f0000000000)=@rc={0x1f, @none, 0x2a}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="41050cf5e2d90b2fbb9110441827a1e0fa0b1109b6c1a8c2fd38a6fe933014ba08b9bb24fdfca8f1a09551c6848eb8f7633941c6fa80ca9e822d2f8bd716ad5764a2e3c7f4813f8ddf84eeafb9294ed99cbfded9e83267fda4131552a6ce9d06673e59386ccdeec4080d8e58067db498980a41cbd298bafc7376c32d3cf5111ee4123b1b28c252bb8d182787c79e45a2931399c7eca1fa72580ec49dca3621c1bd11c68e583a0f709a77d295a365ecd9ea9ae21e0aa98e70e59548f4b92a6703f7d4c85929aa8586200bf3bd196d22a97b496d5ed5f0b7da0186a5a8e96ed96c259f9e3d6cf4485a9c809c762619", 0xee}, {&(0x7f0000000280)="160c1abeb1da875143f4d4b1ef6888b42b9875d0cd739f413a2f108d9c097c6785d72a27c1b8fe3cfec160560d50e1bc031815c9d6ab4adcbe7b06c9bd1abfae851d649862dbd6b96c568bd41203", 0x4e}, {&(0x7f0000000300)="4af254db01ace19e301eb5c118277dbc350c6a18f3e50882142686f2a7b5fb3613f68a7dbb5ef36b082d8d2e588efb1ce46b6593707533878388cb", 0x3b}], 0x3, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0xc8}}, @txtime={{0x18, 0x1, 0x3d, 0x796b}}], 0x30}, 0x14) 3.246244248s ago: executing program 3 (id=1679): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x4f}, {&(0x7f0000001f00)=""/4100, 0xa83}, {&(0x7f0000000bc0)=""/209, 0xa5}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x9a}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000001c0)=""/154, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f", 0x1c}], 0x2}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000800000002e5affff00000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000500"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0x4}, 0x1f) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r3, r4, 0x5, 0x4, 0x3}, 0x50) socket$kcm(0x2, 0x3, 0x106) (async) socket$kcm(0x10, 0x3, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) (async) recvmsg$kcm(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x4f}, {&(0x7f0000001f00)=""/4100, 0xa83}, {&(0x7f0000000bc0)=""/209, 0xa5}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x9a}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000001c0)=""/154, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f", 0x1c}], 0x2}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000800000002e5affff00000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000500"/28], 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0x4}, 0x1f) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r3, r4, 0x5, 0x4, 0x3}, 0x50) (async) 2.898205781s ago: executing program 0 (id=1681): perf_event_open(&(0x7f0000000040)={0x2, 0xfc93, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x50, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="f02a84b9fbcf4a09c9aeb31b4e15209b8521f4948b8fa3a385979d828a5ff2d5a896817b25739d11e3f04d", 0x2b}, {&(0x7f0000000100)="1828b5dd3e92ed", 0x7}, {&(0x7f00000001c0)="645adab1adc102ebce6280a3949536c807fc85fd3c909b143f4f38cd77cd46a3c6531d7d8743965e6fbc0b405908b2a9e07c4088f9c003ed77ab4ebba4d5a219ee27c1b4f0317f8c14581a03f5665e3ca495256e3bfccf44a3b751ef7336e8dc03b9492e28f0ec759e9186fae4d139b0599b50f2d52912c7420f43634ac2a1f29434a06e3cb4f5eca05223c61dae6fe2", 0x90}], 0x3, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x20008085) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) 2.846231485s ago: executing program 3 (id=1682): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000002bc0)={&(0x7f00000001c0), 0x6e, &(0x7f0000002a80)=[{&(0x7f00000003c0)=""/37, 0xffffff07}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001980)=""/244, 0xf4}, {&(0x7f0000001a80)=""/4081, 0x1000}], 0x4, &(0x7f0000002ac0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x53a54f16a3830bfa) r6 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0)=r1, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0xdb1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r4, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x1b) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) sendmsg$inet(r10, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x24}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)}, {&(0x7f0000000440)="8c909d75942c6dcfee707ac91feb89dc88a56257afdc173ed28ae405fc28c7dce2e5eb2967f4", 0x26}], 0x2, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r8, @ANYBLOB="44df0d48645dfadc458dcada11a55d811ed6d916f0c7cd2c825a6af4951da1001ce4e231f54300322b672e39f1b96975a88a9373fff5cb4c88aa37227427086668bcd2e7305c41d50fa98b1d2185a8a78b1c076c3df5565165b9e460fa07e09e8c43b65d253024645a2ca9a169ae7ee2bc8cc454a6f7a533e9e1935d268844c537d957ae8fe9e735894abdf36eea01cecf86ee02e593f8b855d7eef6087617a6da64e1a6d4675444e7d46662808d722b1bcad35caa8ceb0b8f10a98d6900bb0b9e96516768bc8efaec9cede834e6bb69b0a36919677e9c", @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=r3, @ANYRES32=r3], 0x98}, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x9678311ebc1dff2e) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r12], 0x8) socket$kcm(0x10, 0x2, 0x0) 2.803010408s ago: executing program 1 (id=1683): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xc2fc, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000c80)=[r0, r0, r0], &(0x7f0000000cc0)=[{0x5, 0x3, 0x7, 0x9}, {0x2, 0x5, 0x9, 0x1}, {0x3, 0x1, 0xa, 0x7}, {0x0, 0x3, 0x8}, {0x3, 0x4, 0xf, 0xb}, {0x0, 0x5, 0x2e, 0x4}, {0x0, 0x2, 0x10, 0xc}, {0x0, 0x4, 0xb, 0x9}], 0x10, 0x22}, 0x94) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0xfffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.698952135s ago: executing program 0 (id=1684): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x6c000000}, 0x0) 2.474970891s ago: executing program 0 (id=1685): bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000009257007700000000c2a3ee0be3f650431a4900000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6408d, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000092ee793963c57a3031133e62a3aaf5398a56ed254a9eca985029bd9717bd26d13f7ba85574d9c9bc45b1a8340854e1779a8befe572f34c5733576480be3aa74a1945f3a15b5bf4bbca4c48ada56c37372d37a16bbea1e842fa175deca0003a9664bfba79de"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) close(r6) socket$kcm(0x2, 0x3, 0x73) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x800008, 0xfa, &(0x7f0000000580)=""/250, 0x40f00}, 0x94) 2.050434429s ago: executing program 3 (id=1686): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x600}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 2.030266841s ago: executing program 1 (id=1687): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0x0, 0xff}, 0x10018c, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) 1.850315893s ago: executing program 0 (id=1688): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) (fail_nth: 12) 1.849409733s ago: executing program 1 (id=1689): r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x5, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000000980)=[{}, {}], 0x10, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@struct={0x7, 0x5, 0x0, 0x4, 0x1, 0x4, [{0x7, 0x5, 0x5}, {0x6, 0x3, 0x4}, {0xe, 0x1, 0xfffffffb}, {0x10, 0x1, 0x7f}, {0x5, 0x4, 0xfffffffc}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0xf, 0x3}, {0xb, 0x2}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x3}, @fwd={0x9}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x30, 0x30, 0x5f]}}, &(0x7f00000001c0)=""/124, 0xb1, 0x7c, 0x1, 0x2}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000680)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0xb, 0x2, 0xb, 0x2, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0x30}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x520c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000007c0)='syzkaller\x00', 0x6, 0xa2, &(0x7f0000000800)=""/162, 0x40f00, 0x12, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x21a19, r0, 0x0, &(0x7f0000000d40)=[r1, r2], 0x0, 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r7}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1.776364088s ago: executing program 2 (id=1690): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x4000041) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000340), 0x9}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES16, @ANYBLOB="00000000d3ec66ecc053c543da5f", @ANYRES64=r1], 0x48) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff5000009000000000000000000ff003b00000011cd4540", 0x30}], 0x1}, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000009500407bbd944e00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x2000c814) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7) 1.16673426s ago: executing program 0 (id=1691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000040)=@raw=[@exit, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x25, &(0x7f0000000100)=""/37, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r6, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0xd, 0x7f}, 0x4140, 0x8, 0x80000000, 0x8, 0x3, 0xffff, 0xb44b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000000), &(0x7f0000000500)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb01001800000000ddffff0b0000000bffe60002000000000004000000000604"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f00000002c0)}, 0x10) 1.071778276s ago: executing program 1 (id=1692): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 682.217053ms ago: executing program 2 (id=1693): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x800003fc, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffae}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x96}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x654d466c}, @generic={0x8, 0x7, 0xf, 0x5, 0x5a7d}, @ldst={0x3, 0x2, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x10}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x3, &(0x7f0000000140)=""/3, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x9, 0x5, 0x800}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x2, 0x1, 0x7, 0x8}, {0x5, 0x5, 0x3, 0x4}, {0x2, 0x3, 0x8, 0xc}, {0x2, 0x3, 0x2, 0x7}, {0x1, 0x5, 0x4, 0x4}], 0x10, 0x800}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000003c0)=r2, 0x4) 595.408219ms ago: executing program 3 (id=1694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/92, 0x0, 0x5c, 0x1, 0xfffffff8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a80)={0x9, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000140)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8927, &(0x7f0000000280)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 563.870881ms ago: executing program 0 (id=1695): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4, 0x79, 0x10, 0x51}, [@ldst={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x15, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001b40)={0x5, 0x80, 0x8, 0x4, 0x7f, 0x1, 0x0, 0x401, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000001b00), 0xd}, 0x101, 0x81, 0x101, 0x1, 0x40, 0xa1b3, 0xffff, 0x0, 0xc64a, 0x0, 0xc}, 0xffffffffffffffff, 0xf, r3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/670], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x55) 409.285132ms ago: executing program 1 (id=1696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x8, 0xf}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0xfe, 0x2, 0x5, 0x0, 0x6, 0x40, 0xf, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x8}, 0x11a40, 0xffff, 0x5, 0xb, 0x6, 0x10001, 0xffff, 0x0, 0xa91, 0x0, 0x3}, r6, 0xe, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 240.877284ms ago: executing program 2 (id=1697): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0xa, 0x3, 0x11) (async) r8 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000500)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_int(r9, &(0x7f0000000500)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r10], 0xfe33) (async) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r10], 0xfe33) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) recvmsg(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$sock(r10, &(0x7f0000000480)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="d2795bbce2c0928124731a0366", 0xd}, {&(0x7f0000000340)="57265baa01bc3d5b580ce371468dc68940fe65b918b728b55e78d73a2ab1984315997de9cec87688fdb6d7aaf6", 0x2d}, {&(0x7f0000000380)="9ad3187d02a16c0d563ea69e79c8c769dc66603ccd8c1e317ce2f70a73d0def817ddb003a87f81502066906d433d66323d7527ca9acb2185f5b1f8aa1b0cc36a176798b868e161b600", 0x49}], 0x3, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}], 0x18}, 0x90) (async) sendmsg$sock(r10, &(0x7f0000000480)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="d2795bbce2c0928124731a0366", 0xd}, {&(0x7f0000000340)="57265baa01bc3d5b580ce371468dc68940fe65b918b728b55e78d73a2ab1984315997de9cec87688fdb6d7aaf6", 0x2d}, {&(0x7f0000000380)="9ad3187d02a16c0d563ea69e79c8c769dc66603ccd8c1e317ce2f70a73d0def817ddb003a87f81502066906d433d66323d7527ca9acb2185f5b1f8aa1b0cc36a176798b868e161b600", 0x49}], 0x3, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}], 0x18}, 0x90) 0s ago: executing program 1 (id=1698): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa000000000000711010000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) kernel console output (not intermixed with test programs): nfigured BSSID 50:50:50:50:50:50 [ 86.259908][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.270519][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.298769][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.309001][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.324604][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.334941][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.347376][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.369392][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.401165][ T5773] veth0_macvtap: entered promiscuous mode [ 86.447570][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.447885][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.471702][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.482624][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.493914][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.505034][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.528629][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.552998][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.567327][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.576883][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.588169][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.601944][ T5773] veth1_macvtap: entered promiscuous mode [ 86.735613][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.781381][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.802181][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.824721][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.875375][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.908704][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.957517][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.964810][ C1] hrtimer: interrupt took 68352 ns [ 87.086453][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.176716][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.244894][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.307290][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.350616][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.385897][ T5769] Bluetooth: hci0: command tx timeout [ 87.415222][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.449737][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.545846][ T5769] Bluetooth: hci1: command tx timeout [ 87.625270][ T5769] Bluetooth: hci3: command tx timeout [ 87.633317][ T5083] Bluetooth: hci2: command tx timeout [ 87.660632][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.692757][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.712093][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.730693][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.770916][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.809132][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.179319][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.205460][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.303083][ T5842] netlink: 'syz.0.6': attribute type 41 has an invalid length. [ 88.374855][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.382747][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.478337][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.544084][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.465519][ T5769] Bluetooth: hci0: command tx timeout [ 89.625676][ T5769] Bluetooth: hci1: command tx timeout [ 89.705470][ T5769] Bluetooth: hci3: command tx timeout [ 89.710984][ T5769] Bluetooth: hci2: command tx timeout [ 97.747977][ T8] cfg80211: failed to load regulatory.db [ 101.213727][ T5885] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15'. [ 101.568722][ T5890] tap0: tun_chr_ioctl cmd 1074025680 [ 101.631355][ T5893] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 101.677673][ T5893] bond0: (slave bond_slave_0): Releasing backup interface [ 101.774359][ T5897] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.793018][ T5896] warning: `syz.0.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.832645][ T5899] netlink: 'syz.0.19': attribute type 39 has an invalid length. [ 104.658493][ T5931] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.27'. [ 106.134222][ T5944] tap0: tun_chr_ioctl cmd 1074025680 [ 106.355640][ T5947] netlink: 'syz.2.30': attribute type 39 has an invalid length. [ 108.366631][ T5975] sock: sock_timestamping_bind_phc: sock not bind to device [ 110.084872][ T5982] netlink: 'syz.0.40': attribute type 10 has an invalid length. [ 110.369471][ T5979] FAULT_INJECTION: forcing a failure. [ 110.369471][ T5979] name failslab, interval 1, probability 0, space 0, times 1 [ 110.398909][ T5982] bond0: (slave bond_slave_0): Releasing backup interface [ 110.421741][ T5979] CPU: 1 PID: 5979 Comm: syz.3.41 Not tainted syzkaller #0 [ 110.429023][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.439118][ T5979] Call Trace: [ 110.442432][ T5979] [ 110.445401][ T5979] dump_stack_lvl+0x18c/0x250 [ 110.450128][ T5979] ? show_regs_print_info+0x20/0x20 [ 110.455374][ T5979] ? load_image+0x420/0x420 [ 110.459921][ T5979] ? __might_sleep+0xe0/0xe0 [ 110.464545][ T5979] ? __lock_acquire+0x7d40/0x7d40 [ 110.469607][ T5979] should_fail_ex+0x39d/0x4d0 [ 110.474339][ T5979] should_failslab+0x9/0x20 [ 110.478881][ T5979] slab_pre_alloc_hook+0x59/0x310 [ 110.483941][ T5979] ? sctp_association_new+0x89/0x25c0 [ 110.489354][ T5979] __kmem_cache_alloc_node+0x53/0x250 [ 110.494762][ T5979] ? sctp_association_new+0x89/0x25c0 [ 110.500159][ T5979] kmalloc_trace+0x2a/0xe0 [ 110.504611][ T5979] sctp_association_new+0x89/0x25c0 [ 110.509841][ T5979] ? sctp_do_bind+0x6bd/0x990 [ 110.514550][ T5979] sctp_connect_new_asoc+0x2de/0x6a0 [ 110.519856][ T5979] ? __sctp_connect+0xd80/0xd80 [ 110.524729][ T5979] ? security_sctp_bind_connect+0x4a/0xb0 [ 110.530474][ T5979] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 110.536034][ T5979] ? security_sctp_bind_connect+0x89/0xb0 [ 110.541770][ T5979] sctp_sendmsg+0x1575/0x28c0 [ 110.546472][ T5979] ? sctp_getsockopt+0xb60/0xb60 [ 110.551421][ T5979] ? aa_sk_perm+0x83c/0x970 [ 110.555952][ T5979] ? aa_af_perm+0x330/0x330 [ 110.560469][ T5979] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 110.566911][ T5979] ? sock_rps_record_flow+0x19/0x3f0 [ 110.572219][ T5979] ? inet_sendmsg+0xe9/0x2f0 [ 110.576826][ T5979] ? inet_send_prepare+0x260/0x260 [ 110.581955][ T5979] ____sys_sendmsg+0x5ba/0x960 [ 110.586737][ T5979] ? __lock_acquire+0x7d40/0x7d40 [ 110.591778][ T5979] ? __asan_memset+0x22/0x40 [ 110.596387][ T5979] ? __sys_sendmsg_sock+0x30/0x30 [ 110.601422][ T5979] ? __import_iovec+0x5f2/0x850 [ 110.606298][ T5979] ? import_iovec+0x73/0xa0 [ 110.610818][ T5979] ___sys_sendmsg+0x2a6/0x360 [ 110.615512][ T5979] ? __sys_sendmsg+0x2a0/0x2a0 [ 110.620308][ T5979] ? trace_call_bpf+0xc3/0x6c0 [ 110.625128][ T5979] __se_sys_sendmsg+0x1c2/0x2b0 [ 110.630035][ T5979] ? __x64_sys_sendmsg+0x80/0x80 [ 110.635040][ T5979] ? lockdep_hardirqs_on+0x98/0x150 [ 110.640291][ T5979] do_syscall_64+0x55/0xa0 [ 110.644744][ T5979] ? clear_bhb_loop+0x40/0x90 [ 110.649459][ T5979] ? clear_bhb_loop+0x40/0x90 [ 110.654163][ T5979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.660085][ T5979] RIP: 0033:0x7fe253d9c819 [ 110.664514][ T5979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.684167][ T5979] RSP: 002b:00007fe254bb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.692610][ T5979] RAX: ffffffffffffffda RBX: 00007fe254015fa0 RCX: 00007fe253d9c819 [ 110.700623][ T5979] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000006 [ 110.708618][ T5979] RBP: 00007fe254bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 110.716608][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.724593][ T5979] R13: 00007fe254016038 R14: 00007fe254015fa0 R15: 00007fff62e42788 [ 110.732598][ T5979] [ 112.412585][ T5992] tap0: tun_chr_ioctl cmd 1074025680 [ 112.614902][ T5998] netlink: 'syz.1.45': attribute type 21 has an invalid length. [ 112.622639][ T5998] netlink: 128 bytes leftover after parsing attributes in process `syz.1.45'. [ 113.058071][ T6007] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.48'. [ 113.288604][ T6012] sock: sock_timestamping_bind_phc: sock not bind to device [ 113.736064][ T6025] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.51'. [ 114.278706][ T6037] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 114.330426][ T6037] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.55'. [ 115.049220][ T6051] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.67'. [ 115.143006][ T6054] tap0: tun_chr_ioctl cmd 1074025680 [ 115.161466][ T6056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.61'. [ 115.174456][ T6051] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 115.938839][ T6051] syz.2.67 (6051) used greatest stack depth: 20680 bytes left [ 115.985615][ T6072] Illegal XDP return value 4294967274 on prog (id 65) dev N/A, expect packet loss! [ 116.045586][ T6066] syzkaller0: entered promiscuous mode [ 116.062746][ T6066] syzkaller0: entered allmulticast mode [ 116.300552][ T6083] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 116.311160][ T6083] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.65'. [ 118.608387][ T6098] pim6reg1: entered allmulticast mode [ 119.732228][ T6126] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.75'. [ 119.773706][ T6109] netlink: 'syz.1.72': attribute type 10 has an invalid length. [ 122.253632][ T6109] hsr_slave_0: left promiscuous mode [ 122.389248][ T6109] hsr_slave_1: left promiscuous mode [ 122.975623][ T6149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.84'. [ 123.080075][ T6149] Zero length message leads to an empty skb [ 123.260047][ T6134] netlink: 'syz.2.80': attribute type 15 has an invalid length. [ 123.315427][ T6134] netlink: 'syz.2.80': attribute type 7 has an invalid length. [ 123.399829][ T5769] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 123.658159][ T6159] netlink: 'syz.3.86': attribute type 33 has an invalid length. [ 123.715474][ T6159] netlink: 36 bytes leftover after parsing attributes in process `syz.3.86'. [ 124.291602][ T6161] netlink: 'syz.1.88': attribute type 46 has an invalid length. [ 124.314956][ T6161] netlink: 55 bytes leftover after parsing attributes in process `syz.1.88'. [ 125.641420][ T6194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.96'. [ 125.689974][ T6194] netlink: 60 bytes leftover after parsing attributes in process `syz.1.96'. [ 125.869618][ T6189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.96'. [ 126.323758][ T6211] netlink: 668 bytes leftover after parsing attributes in process `syz.1.101'. [ 126.385161][ T6211] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 126.393528][ T6211] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 126.615628][ T6220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 127.472884][ T6237] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.109'. [ 128.502114][ T6263] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.113'. [ 131.562534][ T6323] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.132'. [ 132.376213][ T6326] netlink: 'syz.2.133': attribute type 25 has an invalid length. [ 132.566215][ T6332] netlink: 'syz.2.133': attribute type 33 has an invalid length. [ 132.576507][ T6332] netlink: 164 bytes leftover after parsing attributes in process `syz.2.133'. [ 132.678820][ T6338] netlink: 'syz.3.137': attribute type 10 has an invalid length. [ 133.173975][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.183888][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.313224][ T6338] team0: Port device macvlan0 added [ 136.640283][ T6385] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.149'. [ 137.468767][ T6404] netlink: 'syz.0.154': attribute type 27 has an invalid length. [ 137.497520][ T6404] netlink: 'syz.0.154': attribute type 3 has an invalid length. [ 138.459948][ T6408] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 139.764391][ T6408] team0: Port device macvlan0 added [ 141.138876][ T6425] delete_channel: no stack [ 141.925274][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.962070][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.011976][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.040260][ T6452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.935172][ T6454] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.165'. [ 145.034623][ T6483] netlink: 'syz.2.172': attribute type 21 has an invalid length. [ 145.044932][ T6483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.172'. [ 145.216661][ T6496] netlink: 10 bytes leftover after parsing attributes in process `syz.0.175'. [ 148.493826][ T6525] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.181'. [ 148.569330][ T6526] netlink: 'syz.2.181': attribute type 17 has an invalid length. [ 148.577827][ T6526] netlink: 'syz.2.181': attribute type 16 has an invalid length. [ 148.591185][ T6526] netlink: 152 bytes leftover after parsing attributes in process `syz.2.181'. [ 148.725105][ T6530] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 148.743479][ T6530] netlink: 'syz.3.183': attribute type 19 has an invalid length. [ 148.771689][ T6530] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.183'. [ 149.030544][ T6541] syzkaller0: entered promiscuous mode [ 149.041654][ T6541] syzkaller0: entered allmulticast mode [ 149.357979][ T6544] netlink: 'syz.1.186': attribute type 21 has an invalid length. [ 149.383008][ T6544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.186'. [ 149.911925][ T6554] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.188'. [ 150.726511][ T6568] netlink: 'syz.1.192': attribute type 10 has an invalid length. [ 150.801749][ T6568] team0: Device xfrm0 is of different type [ 150.897005][ T6574] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.194'. [ 150.938615][ T6578] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.195'. [ 150.985532][ T6579] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.195'. [ 151.124091][ T6584] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 151.180939][ T6584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.196'. [ 151.502469][ T6594] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 151.627209][ T6594] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 151.658589][ T6593] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.200'. [ 151.871759][ T6593] bridge_slave_1: default FDB implementation only supports local addresses [ 151.948597][ T6593] netlink: 'syz.1.200': attribute type 39 has an invalid length. [ 152.456642][ T6603] sit0: entered allmulticast mode [ 153.781853][ T6626] netlink: 'syz.3.208': attribute type 10 has an invalid length. [ 153.984482][ T6631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.209'. [ 154.107202][ T6631] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.209'. [ 155.872855][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.220'. [ 156.142168][ T6675] netlink: 'syz.1.219': attribute type 9 has an invalid length. [ 156.216794][ T6675] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.219'. [ 156.855454][ T6684] netlink: 'syz.3.222': attribute type 10 has an invalid length. [ 157.016071][ T6684] netlink: 55 bytes leftover after parsing attributes in process `syz.3.222'. [ 157.184525][ T6687] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.224'. [ 157.834397][ T6712] pim6reg1: entered promiscuous mode [ 157.869334][ T6712] pim6reg1: entered allmulticast mode [ 163.995802][ T6768] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 164.017554][ T6768] netlink: 188 bytes leftover after parsing attributes in process `syz.1.249'. [ 165.220536][ T6778] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 165.597487][ T6778] batman_adv: batadv0: Adding interface: netdevsim0 [ 165.635024][ T6778] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.665078][ T6778] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 165.706294][ T6796] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.255'. [ 165.815076][ T6796] netlink: 'syz.3.255': attribute type 5 has an invalid length. [ 165.847835][ T6796] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.255'. [ 165.916355][ T6804] pimreg: tun_chr_ioctl cmd 1074025677 [ 165.922236][ T6804] pimreg: linktype set to 270 [ 165.928708][ T6778] syz.1.251 (6778) used greatest stack depth: 19880 bytes left [ 166.864546][ T6815] delete_channel: no stack [ 167.517438][ T6839] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.267'. [ 167.726028][ T6846] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.269'. [ 167.802037][ T6850] netlink: 13454 bytes leftover after parsing attributes in process `syz.2.270'. [ 168.011594][ T5769] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 168.335758][ T6866] netlink: 'syz.1.273': attribute type 10 has an invalid length. [ 168.343671][ T6866] netlink: 2 bytes leftover after parsing attributes in process `syz.1.273'. [ 168.450003][ T6866] bond0: entered promiscuous mode [ 168.485388][ T6866] bond_slave_1: entered promiscuous mode [ 168.491705][ T6866] bridge0: port 3(bond0) entered blocking state [ 168.505095][ T6866] bridge0: port 3(bond0) entered disabled state [ 168.545060][ T6866] bond0: entered allmulticast mode [ 168.550449][ T6866] bond_slave_1: entered allmulticast mode [ 168.636877][ T6866] bridge0: port 3(bond0) entered blocking state [ 168.643744][ T6866] bridge0: port 3(bond0) entered forwarding state [ 168.949220][ T6883] netlink: 'syz.2.281': attribute type 9 has an invalid length. [ 168.961566][ T6883] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.281'. [ 169.043400][ T6885] netlink: 'syz.0.282': attribute type 2 has an invalid length. [ 169.057894][ T6885] netlink: 'syz.0.282': attribute type 8 has an invalid length. [ 169.116381][ T6885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.282'. [ 170.061061][ T6911] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.288'. [ 172.042929][ T6933] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.295'. [ 174.972204][ T6965] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 175.029986][ T6965] netlink: 'syz.0.306': attribute type 19 has an invalid length. [ 175.055605][ T6954] netlink: 'syz.2.303': attribute type 3 has an invalid length. [ 175.059510][ T6965] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.306'. [ 175.064074][ T6954] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.303'. [ 175.141681][ T6969] bond0: entered promiscuous mode [ 175.150887][ T6969] bond_slave_0: entered promiscuous mode [ 175.160817][ T6969] bond_slave_1: entered promiscuous mode [ 175.168267][ T6969] bond0: entered allmulticast mode [ 175.173747][ T6969] bond_slave_0: entered allmulticast mode [ 175.181192][ T6969] bond_slave_1: entered allmulticast mode [ 175.421825][ T6982] netlink: 'syz.0.311': attribute type 39 has an invalid length. [ 176.844035][ T7020] tap0: tun_chr_ioctl cmd 1074025677 [ 176.889178][ T7020] tap0: linktype set to 773 [ 177.061955][ T7027] netlink: 'syz.0.323': attribute type 39 has an invalid length. [ 177.426678][ T7032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.324'. [ 177.507564][ T7041] netlink: 'syz.1.326': attribute type 21 has an invalid length. [ 177.533023][ T7041] netlink: 128 bytes leftover after parsing attributes in process `syz.1.326'. [ 177.565761][ T7041] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 177.573487][ T7041] netlink: 'syz.1.326': attribute type 5 has an invalid length. [ 177.614942][ T7041] netlink: 3 bytes leftover after parsing attributes in process `syz.1.326'. [ 177.741154][ T7044] netlink: 156 bytes leftover after parsing attributes in process `syz.2.327'. [ 177.756077][ T7045] netlink: 156 bytes leftover after parsing attributes in process `syz.2.327'. [ 177.782825][ T7047] netlink: 'syz.0.328': attribute type 21 has an invalid length. [ 177.796155][ T7047] netlink: 164 bytes leftover after parsing attributes in process `syz.0.328'. [ 177.817963][ T7047] netlink: 'syz.0.328': attribute type 3 has an invalid length. [ 177.831914][ T7047] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.328'. [ 178.624339][ T7068] netlink: 60 bytes leftover after parsing attributes in process `syz.1.333'. [ 178.855170][ T7065] tap0: tun_chr_ioctl cmd 1074025675 [ 178.906514][ T7065] tap0: persist enabled [ 179.032377][ T7062] tap0: tun_chr_ioctl cmd 1074025675 [ 179.184976][ T7062] tap0: persist enabled [ 180.316770][ T7094] validate_nla: 1 callbacks suppressed [ 180.316789][ T7094] netlink: 'syz.3.338': attribute type 2 has an invalid length. [ 180.339658][ T7094] netlink: 'syz.3.338': attribute type 3 has an invalid length. [ 180.366571][ T7094] __nla_validate_parse: 1 callbacks suppressed [ 180.366587][ T7094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.338'. [ 180.929008][ T7107] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.342'. [ 181.035290][ T7107] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.342'. [ 181.044548][ T7107] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 182.153239][ T7117] netlink: 'syz.3.345': attribute type 39 has an invalid length. [ 184.332534][ T65] tipc: Subscription rejected, illegal request [ 185.028333][ T7153] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 185.044364][ T7153] netlink: 2 bytes leftover after parsing attributes in process `syz.0.354'. [ 185.054013][ T7153] hsr0: entered promiscuous mode [ 185.076065][ T7153] bridge0: port 3(hsr0) entered blocking state [ 185.101758][ T7153] bridge0: port 3(hsr0) entered disabled state [ 185.119839][ T7153] hsr0: entered allmulticast mode [ 185.140104][ T7153] hsr_slave_0: entered allmulticast mode [ 185.152821][ T7153] hsr_slave_1: entered allmulticast mode [ 185.205921][ T7153] bridge0: port 3(hsr0) entered blocking state [ 185.213258][ T7153] bridge0: port 3(hsr0) entered forwarding state [ 185.414983][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 185.532168][ T7162] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.356'. [ 185.814277][ T7173] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 185.838482][ T7173] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.359'. [ 186.139728][ T7183] syz.3.360 uses obsolete (PF_INET,SOCK_PACKET) [ 186.347505][ T5769] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 186.348780][ T5083] Bluetooth: hci2: hardware error 0x00 [ 186.423831][ T7189] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.362'. [ 186.452346][ T7189] openvswitch: netlink: Duplicate key (type 0). [ 188.536440][ T5083] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 188.543762][ T7213] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 188.577755][ T7213] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.368'. [ 188.716855][ T7211] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 190.365686][ T7237] À: port 1(vlan0) entered blocking state [ 190.382768][ T7246] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.376'. [ 190.451733][ T7237] À: port 1(vlan0) entered disabled state [ 190.501456][ T7246] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.376'. [ 190.545079][ T7237] vlan0: entered allmulticast mode [ 190.550300][ T7237] veth0_vlan: entered allmulticast mode [ 190.558558][ T7237] vlan0: entered promiscuous mode [ 190.931615][ T7251] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 191.009938][ T7251] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.378'. [ 191.533239][ T7267] netlink: 'syz.3.380': attribute type 21 has an invalid length. [ 191.838642][ T7257] delete_channel: no stack [ 192.856830][ T7290] netlink: 'syz.1.389': attribute type 3 has an invalid length. [ 192.869185][ T7287] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 192.877880][ T7290] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.389'. [ 192.953825][ T7287] netlink: 55 bytes leftover after parsing attributes in process `syz.3.387'. [ 194.269311][ T7287] team0: Port device macvlan0 removed [ 194.312427][ T7289] netlink: 'syz.3.387': attribute type 4 has an invalid length. [ 194.334857][ T7304] À: port 1(vlan0) entered blocking state [ 194.340739][ T7304] À: port 1(vlan0) entered disabled state [ 194.376148][ T7304] vlan0: entered allmulticast mode [ 194.381362][ T7304] veth0_vlan: entered allmulticast mode [ 194.389891][ T7304] vlan0: entered promiscuous mode [ 194.541422][ T7312] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 194.575115][ T7312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.394'. [ 194.591835][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.598299][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.612262][ T7312] batadv0: entered promiscuous mode [ 194.645034][ T7312] batadv0: entered allmulticast mode [ 194.698946][ T7312] bridge0: port 3(batadv0) entered blocking state [ 194.716367][ T7312] bridge0: port 3(batadv0) entered disabled state [ 194.805010][ T7312] bridge0: port 3(batadv0) entered blocking state [ 194.813480][ T7312] bridge0: port 3(batadv0) entered forwarding state [ 194.912317][ T65] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 194.921947][ T65] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 196.464287][ T7348] macvlan1: entered promiscuous mode [ 197.467194][ T7367] À: port 1(vlan0) entered blocking state [ 197.473109][ T7367] À: port 1(vlan0) entered disabled state [ 197.499946][ T7367] vlan0: entered allmulticast mode [ 197.612162][ T7367] veth0_vlan: entered allmulticast mode [ 197.664059][ T7367] vlan0: entered promiscuous mode [ 197.753044][ T7375] À: port 1(vlan0) entered blocking state [ 197.759079][ T7375] À: port 1(vlan0) entered forwarding state [ 201.702279][ T7407] netlink: 'syz.3.415': attribute type 21 has an invalid length. [ 201.724757][ T7407] netlink: 128 bytes leftover after parsing attributes in process `syz.3.415'. [ 201.742783][ T7407] netlink: 'syz.3.415': attribute type 4 has an invalid length. [ 201.999741][ T7409] netlink: 'syz.2.418': attribute type 10 has an invalid length. [ 202.165671][ T7409] bridge0: port 3(batadv0) entered disabled state [ 202.172435][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.180530][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.218037][ T7409] bridge0: port 3(batadv0) entered blocking state [ 202.224665][ T7409] bridge0: port 3(batadv0) entered forwarding state [ 202.231736][ T7409] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.239024][ T7409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.246623][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.253950][ T7409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.281082][ T7409] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 202.297570][ T7405] netlink: 56537 bytes leftover after parsing attributes in process `syz.1.417'. [ 202.432431][ T7420] netlink: 132 bytes leftover after parsing attributes in process `syz.0.421'. [ 202.461180][ T7420] tap0: tun_chr_ioctl cmd 1074025677 [ 202.467809][ T7420] tap0: linktype set to 0 [ 203.369930][ T7439] netlink: 152 bytes leftover after parsing attributes in process `syz.1.428'. [ 204.204540][ T7454] syzkaller0: entered promiscuous mode [ 204.299465][ T7454] syzkaller0: entered allmulticast mode [ 204.668386][ T7464] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 205.666617][ T7464] bridge0: port 3(hsr0) entered disabled state [ 205.673129][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.680944][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.705711][ T7464] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.727523][ T7464] bridge0: port 3(hsr0) entered blocking state [ 205.733905][ T7464] bridge0: port 3(hsr0) entered forwarding state [ 205.740771][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.748019][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.755654][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.762857][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.774257][ T7464] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 205.825631][ T7477] netlink: 'syz.2.438': attribute type 19 has an invalid length. [ 205.842366][ T7475] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.115633][ T7483] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.439'. [ 206.132408][ T7483] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.439'. [ 206.152626][ T7483] netlink: 2 bytes leftover after parsing attributes in process `syz.2.439'. [ 206.215467][ T7490] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 207.570662][ T7522] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.577491][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 207.585733][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 207.587676][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 207.668128][ T7522] netlink: 1 bytes leftover after parsing attributes in process `syz.3.448'. [ 207.746914][ T7519] netlink: 'syz.1.449': attribute type 10 has an invalid length. [ 207.862374][ T7519] bridge0: port 3(bond0) entered disabled state [ 207.897379][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.999370][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.747921][ T7519] bridge0: port 3(bond0) entered blocking state [ 208.754485][ T7519] bridge0: port 3(bond0) entered forwarding state [ 208.761408][ T7519] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.768864][ T7519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.776519][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.783794][ T7519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.934500][ T7519] bridge0: port 3(bond0) entered disabled state [ 208.941153][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.948611][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.578299][ T7559] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.458'. [ 210.326419][ T7582] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.461'. [ 210.667291][ T7584] netlink: 'syz.1.465': attribute type 39 has an invalid length. [ 210.709260][ T7590] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.467'. [ 210.745692][ T7590] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 210.754060][ T7590] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 212.412025][ T7600] delete_channel: no stack [ 213.281667][ T7584] syz.1.465 (7584) used greatest stack depth: 19816 bytes left [ 213.606811][ T7621] syzkaller0: entered promiscuous mode [ 213.612387][ T7621] syzkaller0: entered allmulticast mode [ 213.715152][ T7621] netlink: 'syz.1.477': attribute type 2 has an invalid length. [ 213.723202][ T7621] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.477'. [ 215.451899][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 215.461133][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 215.470886][ T7630] netlink: 33 bytes leftover after parsing attributes in process `syz.2.479'. [ 215.481850][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 215.502561][ T7630] netlink: 33 bytes leftover after parsing attributes in process `syz.2.479'. [ 215.522246][ T7632] netlink: 'syz.3.480': attribute type 8 has an invalid length. [ 215.537456][ T7632] netlink: 156 bytes leftover after parsing attributes in process `syz.3.480'. [ 215.641048][ T7643] netlink: 'syz.2.483': attribute type 9 has an invalid length. [ 215.649041][ T7643] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.483'. [ 215.943716][ T7645] netlink: 'syz.2.483': attribute type 9 has an invalid length. [ 215.982329][ T7645] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.483'. [ 216.010319][ T7642] delete_channel: no stack [ 216.116944][ T7656] netlink: 830 bytes leftover after parsing attributes in process `syz.3.486'. [ 217.552345][ T7687] netlink: 'syz.0.495': attribute type 29 has an invalid length. [ 217.576232][ T7687] netlink: 'syz.0.495': attribute type 29 has an invalid length. [ 217.666572][ T7685] delete_channel: no stack [ 217.671804][ T7687] netlink: 'syz.0.495': attribute type 29 has an invalid length. [ 217.748932][ T7687] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 218.053240][ T7687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.110007][ T7687] team0: Port device bond0 added [ 218.128944][ T7695] Ÿë: port 1(gretap0) entered blocking state [ 218.144959][ T7695] Ÿë: port 1(gretap0) entered disabled state [ 218.170617][ T7695] gretap0: entered allmulticast mode [ 218.188180][ T7695] gretap0: entered promiscuous mode [ 219.222185][ T7711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.501'. [ 219.431631][ T7716] netlink: 'syz.0.502': attribute type 33 has an invalid length. [ 222.344550][ T7728] netlink: 'syz.2.505': attribute type 2 has an invalid length. [ 222.353674][ T7729] netlink: 14 bytes leftover after parsing attributes in process `syz.2.505'. [ 223.299035][ T7753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'. [ 223.443253][ T7753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.511'. [ 223.511976][ T7757] netlink: 'syz.2.511': attribute type 10 has an invalid length. [ 223.589894][ T7759] netlink: 668 bytes leftover after parsing attributes in process `syz.3.513'. [ 223.614865][ T7759] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 223.623216][ T7759] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 225.252650][ T7777] netlink: 'syz.3.518': attribute type 25 has an invalid length. [ 225.264892][ T7777] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.518'. [ 226.162276][ T7808] netlink: 822 bytes leftover after parsing attributes in process `syz.1.527'. [ 226.223567][ T7801] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 226.364584][ T7813] netlink: 60 bytes leftover after parsing attributes in process `syz.0.529'. [ 226.427246][ T7812] delete_channel: no stack [ 226.987242][ T7820] syzkaller0: left promiscuous mode [ 226.993688][ T7820] syzkaller0: left allmulticast mode [ 227.161238][ T7832] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 227.196211][ T7832] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.534'. [ 227.660649][ T7847] netlink: 10 bytes leftover after parsing attributes in process `syz.3.538'. [ 227.748603][ T7850] netlink: 'syz.2.539': attribute type 2 has an invalid length. [ 227.767854][ T7848] syzkaller0: entered promiscuous mode [ 227.774263][ T7850] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.539'. [ 227.784161][ T7848] syzkaller0: entered allmulticast mode [ 228.511559][ T7874] netlink: 'syz.2.546': attribute type 10 has an invalid length. [ 228.945236][ T7874] team0: Port device geneve1 added [ 229.116171][ T7874] syz.2.546 (7874) used greatest stack depth: 18736 bytes left [ 229.537422][ T7892] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 229.553307][ T7892] netlink: 'syz.0.552': attribute type 19 has an invalid length. [ 229.562035][ T7892] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.552'. [ 230.224533][ T7906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.557'. [ 231.437422][ T7913] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 (while UP) [ 231.917990][ T7923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 232.039541][ T7926] netlink: 'syz.1.562': attribute type 10 has an invalid length. [ 232.487724][ T7923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 233.389213][ T7963] tap2: tun_chr_ioctl cmd 1074025677 [ 233.402909][ T7963] tap2: linktype set to 778 [ 233.557934][ T7970] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.566368][ T7970] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 233.766989][ T7977] netlink: 'syz.1.577': attribute type 3 has an invalid length. [ 233.814944][ T7977] netlink: 'syz.1.577': attribute type 6 has an invalid length. [ 233.825418][ T7977] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.577'. [ 233.880405][ T7984] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 233.916892][ T7984] team0: Device hsr_slave_0 failed to register rx_handler [ 234.029312][ T7992] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.582'. [ 234.372545][ T7997] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 234.383204][ T7997] netlink: 132 bytes leftover after parsing attributes in process `syz.3.583'. [ 234.423041][ T7997] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 234.476226][ T8009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 234.569485][ T8012] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.588'. [ 234.909912][ T7997] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 235.023720][ T8009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.583'. [ 235.308992][ T8029] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.593'. [ 235.323091][ T8029] openvswitch: netlink: IP tunnel dst address not specified [ 235.340590][ T8029] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 235.349346][ T8029] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.593'. [ 237.441452][ T8058] netlink: 'syz.3.600': attribute type 4 has an invalid length. [ 237.527468][ T8057] netlink: 'syz.3.600': attribute type 4 has an invalid length. [ 237.544950][ T8058] __nla_validate_parse: 2 callbacks suppressed [ 237.544969][ T8058] netlink: 174100 bytes leftover after parsing attributes in process `syz.3.600'. [ 237.579971][ T8057] netlink: 174100 bytes leftover after parsing attributes in process `syz.3.600'. [ 238.525565][ T8099] netlink: 'syz.2.611': attribute type 2 has an invalid length. [ 238.583883][ T8099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.611'. [ 238.698873][ T8101] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 238.908942][ T8103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.611'. [ 240.052291][ T8101] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 240.095057][ T8103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.611'. [ 240.265266][ T8107] tap0: tun_chr_ioctl cmd 1074025675 [ 240.270666][ T8107] tap0: persist enabled [ 240.635917][ T8109] tap1: tun_chr_ioctl cmd 1074025677 [ 240.641488][ T8109] tap1: linktype set to 778 [ 241.504860][ T8136] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.619'. [ 243.127957][ T8152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.623'. [ 246.019045][ T8179] netlink: 'syz.3.631': attribute type 10 has an invalid length. [ 246.162688][ T8179] netlink: 2 bytes leftover after parsing attributes in process `syz.3.631'. [ 246.183495][ T8173] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.630'. [ 246.265081][ T8179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.324321][ T8179] hsr0: entered promiscuous mode [ 246.419106][ T8179] bridge0: port 3(hsr0) entered blocking state [ 246.535290][ T8179] bridge0: port 3(hsr0) entered disabled state [ 246.588774][ T8179] hsr0: entered allmulticast mode [ 246.593921][ T8179] hsr_slave_0: entered allmulticast mode [ 246.757253][ T8179] hsr_slave_1: entered allmulticast mode [ 246.860582][ T8179] bridge0: port 3(hsr0) entered blocking state [ 246.867083][ T8179] bridge0: port 3(hsr0) entered forwarding state [ 249.418617][ T8216] netlink: 'syz.2.640': attribute type 9 has an invalid length. [ 249.440768][ T8216] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.640'. [ 249.447402][ T8220] netlink: 168 bytes leftover after parsing attributes in process `syz.3.641'. [ 249.510330][ T8219] delete_channel: no stack [ 249.538492][ T8215] netlink: 'syz.2.640': attribute type 9 has an invalid length. [ 249.547534][ T8215] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.640'. [ 249.748081][ T8226] netlink: 'syz.3.644': attribute type 10 has an invalid length. [ 249.764904][ T8226] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.644'. [ 249.779962][ T8226] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 251.041388][ T8247] netlink: 195296 bytes leftover after parsing attributes in process `syz.1.651'. [ 252.875882][ T8271] netlink: 14 bytes leftover after parsing attributes in process `syz.0.656'. [ 253.366784][ T8292] netlink: 'syz.3.662': attribute type 11 has an invalid length. [ 253.392531][ T8294] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.664'. [ 253.408413][ T8292] netlink: 168 bytes leftover after parsing attributes in process `syz.3.662'. [ 253.551394][ T8302] netlink: 'syz.2.664': attribute type 2 has an invalid length. [ 253.613483][ T8302] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 254.571594][ T8293] delete_channel: no stack [ 254.606401][ T8320] netlink: 'syz.3.669': attribute type 21 has an invalid length. [ 254.638406][ T8320] netlink: 120 bytes leftover after parsing attributes in process `syz.3.669'. [ 255.265835][ T8326] netlink: 'syz.1.679': attribute type 7 has an invalid length. [ 255.332635][ T8326] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.679'. [ 255.415492][ T8324] pim6reg1: entered promiscuous mode [ 255.431162][ T8324] pim6reg1: entered allmulticast mode [ 256.032345][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.038832][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.185601][ T8353] netlink: 'syz.2.676': attribute type 10 has an invalid length. [ 256.231231][ T8353] bond0: (slave bond_slave_0): Releasing backup interface [ 256.295389][ T8357] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 257.718456][ T8376] netlink: 'syz.0.682': attribute type 27 has an invalid length. [ 257.746273][ T8376] netlink: 'syz.0.682': attribute type 4 has an invalid length. [ 257.773278][ T8376] netlink: 152 bytes leftover after parsing attributes in process `syz.0.682'. [ 258.237257][ T8384] netlink: 'syz.0.684': attribute type 2 has an invalid length. [ 258.280247][ T8384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.684'. [ 258.829552][ T8401] validate_nla: 1 callbacks suppressed [ 258.829573][ T8401] netlink: 'syz.2.688': attribute type 21 has an invalid length. [ 258.895380][ T8401] netlink: 156 bytes leftover after parsing attributes in process `syz.2.688'. [ 258.939956][ T8403] netlink: 'syz.3.687': attribute type 17 has an invalid length. [ 258.973723][ T8403] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 261.034011][ T8444] netlink: 'syz.0.692': attribute type 33 has an invalid length. [ 261.200547][ T8444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.692'. [ 264.832180][ T8491] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.700'. [ 266.744361][ T8504] netlink: 132 bytes leftover after parsing attributes in process `syz.2.702'. [ 267.971829][ T8507] delete_channel: no stack [ 268.043991][ T8523] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.706'. [ 270.286196][ T8564] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 270.416059][ T8568] netlink: 'syz.3.715': attribute type 6 has an invalid length. [ 270.435132][ T8568] netlink: 140 bytes leftover after parsing attributes in process `syz.3.715'. [ 271.351695][ T8569] delete_channel: no stack [ 272.255299][ T8602] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 272.325368][ T8602] netlink: 55 bytes leftover after parsing attributes in process `syz.1.724'. [ 274.431774][ T8602] vlan0 (unregistering): left allmulticast mode [ 274.446022][ T8602] veth0_vlan (unregistering): left allmulticast mode [ 274.455605][ T8602] vlan0 (unregistering): left promiscuous mode [ 274.462113][ T8602] À: port 1(vlan0) entered disabled state [ 274.639524][ T8615] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 [ 274.924774][ T8627] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.731'. [ 274.950614][ T8624] delete_channel: no stack [ 275.090779][ T8627] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 275.139861][ T8627] CPU: 1 PID: 8627 Comm: syz.0.731 Not tainted syzkaller #0 [ 275.147275][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 275.157375][ T8627] Call Trace: [ 275.160749][ T8627] [ 275.163775][ T8627] dump_stack_lvl+0x18c/0x250 [ 275.168525][ T8627] ? show_regs_print_info+0x20/0x20 [ 275.173813][ T8627] ? load_image+0x420/0x420 [ 275.178448][ T8627] sysfs_warn_dup+0x8e/0xa0 [ 275.183107][ T8627] sysfs_do_create_link_sd+0xc0/0x110 [ 275.188526][ T8627] device_add_class_symlinks+0x1cf/0x240 [ 275.194244][ T8627] device_add+0x507/0xc20 [ 275.198649][ T8627] wiphy_register+0x1dad/0x2ae0 [ 275.203605][ T8627] ? cfg80211_event_work+0x40/0x40 [ 275.208842][ T8627] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.215082][ T8627] ieee80211_register_hw+0x3464/0x4250 [ 275.220662][ T8627] ? ieee80211_tasklet_handler+0x20/0x20 [ 275.226330][ T8627] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 275.232445][ T8627] ? __debug_object_init+0xec/0x450 [ 275.237699][ T8627] ? __asan_memset+0x22/0x40 [ 275.242368][ T8627] ? __hrtimer_init+0x186/0x270 [ 275.247272][ T8627] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 275.253362][ T8627] ? mac80211_hwsim_free+0x220/0x220 [ 275.258682][ T8627] ? rcu_is_watching+0x15/0xb0 [ 275.263490][ T8627] ? kstrndup+0xbd/0x140 [ 275.267809][ T8627] hwsim_new_radio_nl+0xdc9/0x1a90 [ 275.272983][ T8627] ? __nla_validate+0x50/0x50 [ 275.277700][ T8627] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 275.283759][ T8627] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 275.290124][ T8627] ? lockdep_hardirqs_on+0x98/0x150 [ 275.295376][ T8627] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.301602][ T8627] ? __nla_parse+0x40/0x50 [ 275.306080][ T8627] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 275.312466][ T8627] genl_family_rcv_msg_doit+0x211/0x310 [ 275.318049][ T8627] ? end_current_label_crit_section+0x170/0x170 [ 275.324343][ T8627] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 275.330297][ T8627] ? bpf_lsm_capable+0x9/0x10 [ 275.335027][ T8627] ? security_capable+0x89/0xb0 [ 275.339970][ T8627] genl_rcv_msg+0x619/0x7a0 [ 275.344545][ T8627] ? genl_bind+0x360/0x360 [ 275.349007][ T8627] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 275.355381][ T8627] ? mark_lock+0x94/0x320 [ 275.359782][ T8627] netlink_rcv_skb+0x241/0x4d0 [ 275.364604][ T8627] ? genl_bind+0x360/0x360 [ 275.369063][ T8627] ? netlink_ack+0x1180/0x1180 [ 275.373877][ T8627] ? lockdep_hardirqs_on+0x98/0x150 [ 275.379182][ T8627] ? kasan_check_range+0x89/0x290 [ 275.384355][ T8627] ? down_read+0x1ac/0x2e0 [ 275.388850][ T8627] genl_rcv+0x28/0x40 [ 275.392917][ T8627] netlink_unicast+0x751/0x8d0 [ 275.397794][ T8627] netlink_sendmsg+0x8d0/0xbf0 [ 275.402649][ T8627] ? netlink_getsockopt+0x590/0x590 [ 275.407905][ T8627] ? aa_sock_msg_perm+0x94/0x150 [ 275.412919][ T8627] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 275.418268][ T8627] ? security_socket_sendmsg+0x80/0xa0 [ 275.423784][ T8627] ? netlink_getsockopt+0x590/0x590 [ 275.429047][ T8627] ____sys_sendmsg+0x5ba/0x960 [ 275.433895][ T8627] ? __asan_memset+0x22/0x40 [ 275.438536][ T8627] ? __sys_sendmsg_sock+0x30/0x30 [ 275.443601][ T8627] ? __import_iovec+0x5f2/0x850 [ 275.448523][ T8627] ? import_iovec+0x73/0xa0 [ 275.453080][ T8627] ___sys_sendmsg+0x2a6/0x360 [ 275.457816][ T8627] ? __sys_sendmsg+0x2a0/0x2a0 [ 275.462688][ T8627] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 275.469055][ T8627] __se_sys_sendmsg+0x1c2/0x2b0 [ 275.473957][ T8627] ? __x64_sys_sendmsg+0x80/0x80 [ 275.478983][ T8627] ? lockdep_hardirqs_on+0x98/0x150 [ 275.484239][ T8627] do_syscall_64+0x55/0xa0 [ 275.488706][ T8627] ? clear_bhb_loop+0x40/0x90 [ 275.493533][ T8627] ? clear_bhb_loop+0x40/0x90 [ 275.498287][ T8627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.504236][ T8627] RIP: 0033:0x7f19a199c819 [ 275.508694][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.528362][ T8627] RSP: 002b:00007f19a2782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.536829][ T8627] RAX: ffffffffffffffda RBX: 00007f19a1c15fa0 RCX: 00007f19a199c819 [ 275.544842][ T8627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 275.552849][ T8627] RBP: 00007f19a1a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 275.560861][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.568866][ T8627] R13: 00007f19a1c16038 R14: 00007f19a1c15fa0 R15: 00007ffc03202578 [ 275.576936][ T8627] [ 276.224613][ T8639] tap1: tun_chr_ioctl cmd 1074025677 [ 276.236963][ T8639] tap1: linktype set to 778 [ 280.592163][ T8744] netlink: 'syz.0.761': attribute type 10 has an invalid length. [ 280.668085][ T8744] geneve0: entered promiscuous mode [ 280.742812][ T8744] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 281.259698][ T8762] netlink: 'syz.1.766': attribute type 10 has an invalid length. [ 281.355442][ T8762] team0 (unregistering): Port device team_slave_0 removed [ 281.423162][ T8762] team0 (unregistering): Port device team_slave_1 removed [ 281.469510][ T8767] netlink: 'syz.2.768': attribute type 39 has an invalid length. [ 282.011930][ T8779] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 282.133266][ T8779] bond0: (slave geneve0): Releasing backup interface [ 282.487466][ T8791] netlink: 'syz.1.775': attribute type 10 has an invalid length. [ 282.498358][ T8791] netlink: 152 bytes leftover after parsing attributes in process `syz.1.775'. [ 282.542970][ T8794] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 282.604560][ T8794] geneve0: entered promiscuous mode [ 282.976971][ T8794] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 283.028923][ T8803] netlink: 'syz.0.778': attribute type 2 has an invalid length. [ 283.084750][ T8803] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.778'. [ 283.097589][ T8803] netlink: 'syz.0.778': attribute type 21 has an invalid length. [ 283.114746][ T8803] netlink: 156 bytes leftover after parsing attributes in process `syz.0.778'. [ 283.245146][ T8801] netlink: 104 bytes leftover after parsing attributes in process `syz.1.779'. [ 283.478824][ T8812] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 283.662855][ T8812] team0 (unregistering): Port device team_slave_0 removed [ 283.699404][ T8812] team0 (unregistering): Port device team_slave_1 removed [ 283.729080][ T8812] team0 (unregistering): Port device bond0 removed [ 283.764511][ T8815] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 283.781934][ T8815] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 283.789360][ T8815] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 283.827702][ T8815] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 283.838615][ T8815] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 283.850156][ T8815] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 284.121091][ T8817] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.780'. [ 284.174606][ T8817] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 284.721807][ T8842] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.787'. [ 284.894568][ T8837] bridge0: port 3(hsr0) entered disabled state [ 284.901874][ T8837] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.910197][ T8837] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.423186][ T8855] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.791'. [ 286.235813][ T8870] validate_nla: 3 callbacks suppressed [ 286.235836][ T8870] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 288.754386][ T8870] team0 (unregistering): Port device team_slave_0 removed [ 288.807293][ T8870] team0 (unregistering): Port device team_slave_1 removed [ 288.831272][ T8868] netlink: 188 bytes leftover after parsing attributes in process `syz.1.804'. [ 288.933060][ T8875] netlink: 39075 bytes leftover after parsing attributes in process `syz.0.797'. [ 289.324770][ T8884] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.798'. [ 289.380712][ T8879] tap1: tun_chr_ioctl cmd 21731 [ 289.431285][ T8887] tap1: tun_chr_ioctl cmd 1074025675 [ 289.442318][ T8887] tap1: persist enabled [ 289.457399][ T8894] netlink: 'syz.0.802': attribute type 21 has an invalid length. [ 289.472042][ T8894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.802'. [ 289.553422][ T8893] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.801'. [ 289.660351][ T8890] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.801'. [ 289.693897][ T8894] netlink: 'syz.0.802': attribute type 10 has an invalid length. [ 289.924044][ T8894] hsr0: left allmulticast mode [ 289.942300][ T8894] hsr_slave_0: left allmulticast mode [ 289.965094][ T8894] hsr_slave_1: left allmulticast mode [ 289.973625][ T8894] hsr0: left promiscuous mode [ 289.984967][ T8894] bridge0: port 3(hsr0) entered disabled state [ 291.662556][ T8941] netlink: 'syz.0.817': attribute type 10 has an invalid length. [ 291.701978][ T8941] netlink: 55 bytes leftover after parsing attributes in process `syz.0.817'. [ 291.838879][ T8950] netlink: 'syz.3.813': attribute type 153 has an invalid length. [ 291.847912][ T8950] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.813'. [ 292.392381][ T8941] À: port 1(vlan0) entered disabled state [ 292.662305][ T8941] vlan0 (unregistering): left allmulticast mode [ 292.668887][ T8941] veth0_vlan (unregistering): left allmulticast mode [ 292.677579][ T8941] vlan0 (unregistering): left promiscuous mode [ 292.687380][ T8941] À: port 1(vlan0) entered disabled state [ 292.798818][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.806701][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.818502][ T8944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.826191][ T8944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.833941][ T8944] batman_adv: batadv0: Removing interface: netdevsim0 [ 292.878971][ T8945] netlink: 'syz.0.817': attribute type 4 has an invalid length. [ 292.888050][ T8943] netlink: 'syz.3.813': attribute type 10 has an invalid length. [ 292.898164][ T8943] bridge0: port 3(hsr0) entered disabled state [ 292.904628][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.912625][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.937058][ T8943] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 292.963703][ T8943] bridge0: port 3(hsr0) entered blocking state [ 292.970204][ T8943] bridge0: port 3(hsr0) entered forwarding state [ 292.976936][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.984160][ T8943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.991769][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.999035][ T8943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.020948][ T8943] bridge0: entered promiscuous mode [ 293.026701][ T8943] bridge0: entered allmulticast mode [ 293.033156][ T8943] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 293.593624][ T8961] netlink: 2 bytes leftover after parsing attributes in process `syz.2.821'. [ 293.603245][ T8961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.616149][ T8961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.626913][ T8961] batadv_slave_1: entered promiscuous mode [ 293.632930][ T8969] netlink: 188 bytes leftover after parsing attributes in process `syz.0.825'. [ 293.643267][ T8970] netlink: 'syz.1.823': attribute type 21 has an invalid length. [ 293.660262][ T8973] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 293.870894][ T8977] __nla_validate_parse: 1 callbacks suppressed [ 293.870912][ T8977] netlink: 152 bytes leftover after parsing attributes in process `syz.2.826'. [ 294.124436][ T8987] bridge0: entered allmulticast mode [ 294.402566][ T8994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.928212][ T9012] netlink: 'syz.3.836': attribute type 21 has an invalid length. [ 294.950878][ T9012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.836'. [ 295.055067][ T9014] netlink: 'syz.2.833': attribute type 10 has an invalid length. [ 295.159546][ T9014] bridge0: port 3(batadv0) entered disabled state [ 295.166897][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.174529][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.232920][ T9008] netlink: 'syz.2.833': attribute type 153 has an invalid length. [ 295.275045][ T9008] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.833'. [ 295.305598][ T9012] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 295.413332][ T9012] bridge0: port 3(hsr0) entered disabled state [ 295.421667][ T9012] hsr0: left allmulticast mode [ 295.427449][ T9012] hsr_slave_0: left allmulticast mode [ 295.433258][ T9012] hsr_slave_1: left allmulticast mode [ 295.439926][ T9012] hsr0: left promiscuous mode [ 295.449546][ T9012] bridge0: port 3(hsr0) entered disabled state [ 295.469044][ T9025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.839'. [ 295.495905][ T9025] caif0: entered promiscuous mode [ 295.525285][ T9025] caif0: entered allmulticast mode [ 295.533846][ T9025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.081899][ T9037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.843'. [ 296.146008][ T9030] netlink: set zone limit has 8 unknown bytes [ 298.751292][ T9040] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 299.128536][ T9059] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.850'. [ 300.696953][ T9088] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.855'. [ 300.707195][ T9088] netlink: zone id is out of range [ 300.712438][ T9088] netlink: zone id is out of range [ 300.716150][ T9087] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.855'. [ 300.718311][ T9088] netlink: zone id is out of range [ 300.732300][ T9088] netlink: zone id is out of range [ 300.737958][ T9088] netlink: zone id is out of range [ 300.743108][ T9088] netlink: zone id is out of range [ 300.753893][ T9078] validate_nla: 1 callbacks suppressed [ 300.753909][ T9078] netlink: 'syz.1.852': attribute type 10 has an invalid length. [ 300.782812][ T9087] netlink: zone id is out of range [ 300.797540][ T9087] netlink: zone id is out of range [ 300.819097][ T9080] netlink: 'syz.1.852': attribute type 153 has an invalid length. [ 300.828843][ T9088] netlink: zone id is out of range [ 300.831640][ T9087] netlink: zone id is out of range [ 300.845943][ T9078] bridge0: port 3(bond0) entered blocking state [ 300.848835][ T9080] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.852'. [ 300.862110][ T9078] bridge0: port 3(bond0) entered forwarding state [ 300.870936][ T9078] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.878835][ T9078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.890203][ T9078] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.898176][ T9078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.970654][ T9078] bridge0: port 3(bond0) entered disabled state [ 300.985277][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.993002][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.708425][ T9096] netlink: 'syz.2.857': attribute type 2 has an invalid length. [ 301.846492][ T9096] netlink: 'syz.2.857': attribute type 8 has an invalid length. [ 301.854250][ T9096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.857'. [ 303.046566][ T9120] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 303.139088][ T9122] netlink: 14 bytes leftover after parsing attributes in process `syz.1.865'. [ 303.799105][ T9122] bond0 (unregistering): left allmulticast mode [ 303.805873][ T9122] bond_slave_1: left allmulticast mode [ 303.811594][ T9122] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 303.819680][ T9122] bridge0: port 3(bond0) entered disabled state [ 303.851828][ T9122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.866865][ T9122] bond_slave_1: left promiscuous mode [ 303.892133][ T9122] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 303.906542][ T9122] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 303.927615][ T9122] bond0 (unregistering): Released all slaves [ 304.010969][ T9136] netlink: 'syz.0.870': attribute type 10 has an invalid length. [ 304.044931][ T9136] netlink: 168 bytes leftover after parsing attributes in process `syz.0.870'. [ 304.505946][ T9153] raw_sendmsg: syz.2.873 forgot to set AF_INET. Fix it! [ 304.603357][ T9155] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.876'. [ 304.722630][ T9155] netlink: 'syz.0.876': attribute type 21 has an invalid length. [ 304.778720][ T9155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.876'. [ 304.945955][ T9160] netlink: 'syz.1.877': attribute type 2 has an invalid length. [ 304.953736][ T9160] netlink: 'syz.1.877': attribute type 8 has an invalid length. [ 304.963119][ T9160] netlink: 132 bytes leftover after parsing attributes in process `syz.1.877'. [ 305.558067][ T9172] netlink: 164 bytes leftover after parsing attributes in process `syz.0.880'. [ 305.808666][ T9180] netlink: 'syz.0.883': attribute type 11 has an invalid length. [ 306.101403][ T9191] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.886'. [ 306.111209][ T9191] bridge_slave_1: default FDB implementation only supports local addresses [ 306.123838][ T9191] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.886'. [ 306.135127][ T9191] bridge_slave_1: default FDB implementation only supports local addresses [ 307.087114][ T9201] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 308.938820][ T9239] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 309.468643][ T9255] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.903'. [ 309.486647][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 311.547091][ T9311] netlink: 68 bytes leftover after parsing attributes in process `syz.2.918'. [ 311.970567][ T9330] netlink: 'syz.1.924': attribute type 10 has an invalid length. [ 313.072382][ T9350] netlink: 'syz.0.930': attribute type 1 has an invalid length. [ 313.081689][ T9352] netlink: 'syz.2.928': attribute type 10 has an invalid length. [ 313.107290][ T9350] netlink: 'syz.0.930': attribute type 3 has an invalid length. [ 313.129324][ T9350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.930'. [ 313.694190][ T9364] delete_channel: no stack [ 313.703063][ T9364] delete_channel: no stack [ 313.715017][ T9364] delete_channel: no stack [ 313.737046][ T9364] delete_channel: no stack [ 313.741890][ T9364] delete_channel: no stack [ 313.747407][ T9364] delete_channel: no stack [ 313.752752][ T9364] delete_channel: no stack [ 313.757661][ T9364] delete_channel: no stack [ 313.762373][ T9364] delete_channel: no stack [ 313.767342][ T9364] delete_channel: no stack [ 313.772084][ T9364] delete_channel: no stack [ 313.780762][ T9364] delete_channel: no stack [ 313.787045][ T9364] delete_channel: no stack [ 313.791946][ T9364] delete_channel: no stack [ 313.798178][ T9364] delete_channel: no stack [ 313.803034][ T9364] delete_channel: no stack [ 313.887411][ T9364] delete_channel: no stack [ 313.892104][ T9364] delete_channel: no stack [ 313.940457][ T9375] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.935'. [ 313.943476][ T9364] delete_channel: no stack [ 313.955359][ T9364] delete_channel: no stack [ 313.960370][ T9364] delete_channel: no stack [ 313.972466][ T9364] delete_channel: no stack [ 313.993678][ T9364] delete_channel: no stack [ 314.015534][ T9364] delete_channel: no stack [ 314.025137][ T9364] delete_channel: no stack [ 314.029812][ T9364] delete_channel: no stack [ 314.034552][ T9364] delete_channel: no stack [ 314.045001][ T9364] delete_channel: no stack [ 314.258077][ T9385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.938'. [ 314.278477][ T9385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.938'. [ 314.307727][ T9385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.938'. [ 314.330453][ T9385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.938'. [ 314.777271][ T9386] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 314.788936][ T9386] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.937'. [ 314.803985][ T9386] netlink: 1 bytes leftover after parsing attributes in process `syz.3.937'. [ 315.475341][ T9399] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.943'. [ 315.508503][ T9399] netlink: 'syz.2.943': attribute type 33 has an invalid length. [ 315.516646][ T9399] `: renamed from ip6tnl0 (while UP) [ 315.525587][ T9399] net_ratelimit: 672 callbacks suppressed [ 315.525602][ T9399] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 315.723582][ T9402] netlink: 'syz.1.944': attribute type 3 has an invalid length. [ 316.278790][ T9412] netlink: 'syz.3.947': attribute type 21 has an invalid length. [ 316.341821][ T9414] netlink: 'syz.0.948': attribute type 29 has an invalid length. [ 316.376928][ T9414] netlink: 'syz.0.948': attribute type 29 has an invalid length. [ 316.971872][ T9434] __nla_validate_parse: 3 callbacks suppressed [ 316.971892][ T9434] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.953'. [ 317.002245][ T9423] veth1_macvtap: left promiscuous mode [ 317.469395][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.478932][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.369710][ T5771] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 318.453770][ T9453] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.958'. [ 318.833417][ T9461] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.961'. [ 319.622516][ T9460] delete_channel: no stack [ 320.435366][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 323.395002][ T9498] netlink: 128 bytes leftover after parsing attributes in process `syz.1.971'. [ 323.460853][ T9509] validate_nla: 1 callbacks suppressed [ 323.460873][ T9509] netlink: 'syz.2.975': attribute type 10 has an invalid length. [ 323.476661][ T9509] netlink: 55 bytes leftover after parsing attributes in process `syz.2.975'. [ 323.648043][ T9513] netlink: 668 bytes leftover after parsing attributes in process `syz.3.976'. [ 323.658219][ T9513] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 323.675893][ T9513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 324.047851][ T9509] team0: Port device macvlan0 removed [ 324.360213][ T9509] vlan0 (unregistering): left allmulticast mode [ 324.375350][ T9509] veth0_vlan (unregistering): left allmulticast mode [ 324.382142][ T9509] vlan0 (unregistering): left promiscuous mode [ 324.392961][ T9509] À: port 1(vlan0) entered disabled state [ 324.573763][ T9534] netlink: 'syz.0.980': attribute type 2 has an invalid length. [ 324.581637][ T9534] netlink: 132 bytes leftover after parsing attributes in process `syz.0.980'. [ 324.606287][ T9533] netlink: 'syz.0.980': attribute type 2 has an invalid length. [ 324.615464][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.0.980'. [ 325.743478][ T9557] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.986'. [ 325.896506][ T9557] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.986'. [ 326.108313][ T9570] netlink: 'syz.2.989': attribute type 12 has an invalid length. [ 326.133181][ T9570] netlink: 132 bytes leftover after parsing attributes in process `syz.2.989'. [ 326.160292][ T9572] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.990'. [ 326.585307][ T9576] netlink: 'syz.0.991': attribute type 10 has an invalid length. [ 326.593336][ T9576] netlink: 55 bytes leftover after parsing attributes in process `syz.0.991'. [ 327.484110][ T9591] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 328.116971][ T9610] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 328.335107][ T9619] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 329.268425][ T9662] __nla_validate_parse: 2 callbacks suppressed [ 329.268443][ T9662] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1018'. [ 330.286442][ T9702] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1028'. [ 330.429617][ T9711] netlink: 'syz.0.1031': attribute type 10 has an invalid length. [ 330.797994][ T9722] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1035'. [ 331.207426][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 331.307210][ T9740] netlink: 'syz.3.1040': attribute type 19 has an invalid length. [ 331.333440][ T9740] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1040'. [ 332.158815][ T9754] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 332.217573][ T9754] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1043'. [ 332.351186][ T9760] netlink: 'syz.0.1045': attribute type 3 has an invalid length. [ 332.379605][ T9760] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1045'. [ 332.638271][ T9764] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1046'. [ 332.675836][ T9764] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 332.697620][ T9764] openvswitch: netlink: Message has 4 unknown bytes. [ 332.968544][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 333.004948][ T9782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 333.967077][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.594435][ T9826] syzkaller0: entered promiscuous mode [ 335.610399][ T9826] syzkaller0: entered allmulticast mode [ 335.622687][ T9826] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 336.135390][ T9835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.249245][ T9847] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 336.300678][ T9852] netlink: 'syz.1.1068': attribute type 10 has an invalid length. [ 336.314968][ T9852] netlink: 'syz.1.1068': attribute type 19 has an invalid length. [ 336.354910][ T9852] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.1068'. [ 336.716547][ T9863] netlink: 'syz.2.1072': attribute type 10 has an invalid length. [ 338.651080][ T9880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.742526][ T9906] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 338.815575][ T9906] batadv0: left allmulticast mode [ 338.820884][ T9906] batadv0: left promiscuous mode [ 338.837960][ T9906] bridge0: port 3(batadv0) entered disabled state [ 338.853862][ T9906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.863918][ T9906] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 339.140904][ T9916] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1087'. [ 339.681933][ T9934] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1093'. [ 339.780698][ T9937] netlink: 'syz.1.1095': attribute type 29 has an invalid length. [ 340.304157][ T9939] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1093'. [ 340.323630][ T9937] netlink: 'syz.1.1095': attribute type 29 has an invalid length. [ 340.342471][ T9944] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1093'. [ 340.381020][ T9934] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1093'. [ 341.202034][ T9964] netlink: 'syz.0.1101': attribute type 10 has an invalid length. [ 341.303718][ T9973] netlink: 'syz.0.1101': attribute type 9 has an invalid length. [ 341.329949][ T9973] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1101'. [ 341.353187][ T9964] netlink: 'syz.0.1101': attribute type 9 has an invalid length. [ 341.407063][ T9964] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1101'. [ 341.515356][ T9984] netlink: 'syz.1.1105': attribute type 3 has an invalid length. [ 341.523461][ T9984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1105'. [ 342.544195][ T9991] netlink: 'syz.1.1106': attribute type 10 has an invalid length. [ 342.739004][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 342.761737][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 343.059969][T10018] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1114'. [ 343.529082][T10027] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1117'. [ 343.720519][T10031] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 343.743744][T10031] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 343.856641][T10037] netlink: 'syz.3.1121': attribute type 10 has an invalid length. [ 343.905510][T10037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.929895][T10037] batadv0: entered promiscuous mode [ 343.945838][T10037] batadv0: entered allmulticast mode [ 343.952430][T10037] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 343.976113][T10040] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1122'. [ 343.995268][T10040] tc_dump_action: action bad kind [ 344.393068][T10048] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 344.417068][T10048] netlink: 'syz.0.1125': attribute type 4 has an invalid length. [ 344.438382][T10048] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1125'. [ 344.522168][T10048] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1125'. [ 344.741961][T10051] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1124'. [ 344.848816][T10051] netlink: 'syz.3.1124': attribute type 13 has an invalid length. [ 345.130898][T10051] erspan0: refused to change device tx_queue_len [ 345.153051][T10051] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 345.925606][T10055] IPv6: pim6reg1: Disabled Multicast RS [ 346.082055][T10072] netlink: 'syz.0.1131': attribute type 4 has an invalid length. [ 346.103091][T10072] .`: renamed from bond0 [ 346.880540][T10095] bridge0: entered allmulticast mode [ 347.942136][T10143] __nla_validate_parse: 4 callbacks suppressed [ 347.942175][T10143] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1149'. [ 348.869029][T10178] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1158'. [ 349.190466][T10187] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.354580][T10195] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 349.363582][T10195] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1164'. [ 349.792143][T10202] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 349.820487][T10202] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1167'. [ 350.021395][T10220] sctp: [Deprecated]: syz.2.1172 (pid 10220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.021395][T10220] Use struct sctp_sack_info instead [ 351.588036][T10251] tun0: tun_chr_ioctl cmd 1074025677 [ 351.624581][T10251] tun0: linktype set to 768 [ 351.771398][T10257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1183'. [ 351.877254][T10264] sctp: [Deprecated]: syz.3.1184 (pid 10264) Use of int in maxseg socket option. [ 351.877254][T10264] Use struct sctp_assoc_value instead [ 351.942961][T10264] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 351.976116][T10264] hsr_slave_0: left promiscuous mode [ 352.003480][T10264] hsr_slave_1: left promiscuous mode [ 352.159272][T10272] netlink: 'syz.0.1188': attribute type 17 has an invalid length. [ 352.170586][T10272] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1188'. [ 352.319194][T10277] netlink: 'syz.3.1190': attribute type 9 has an invalid length. [ 352.327625][T10277] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1190'. [ 352.512691][ T5771] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 352.881814][T10300] netlink: 'syz.3.1196': attribute type 17 has an invalid length. [ 352.905289][T10300] netlink: 'syz.3.1196': attribute type 16 has an invalid length. [ 352.917818][T10300] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1196'. [ 352.945215][T10298] netlink: 'syz.3.1196': attribute type 17 has an invalid length. [ 352.960149][T10298] netlink: 'syz.3.1196': attribute type 16 has an invalid length. [ 352.969792][T10298] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1196'. [ 353.052318][T10305] tap0: tun_chr_ioctl cmd 2147767506 [ 353.198747][T10305] netlink: 3890 bytes leftover after parsing attributes in process `syz.0.1199'. [ 353.223199][T10311] tap0: tun_chr_ioctl cmd 1074025681 [ 353.313318][T10310] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 353.324898][T10310] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1200'. [ 353.602474][ T1077] tipc: Subscription rejected, illegal request [ 354.220833][T10347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 354.377222][T10352] validate_nla: 1 callbacks suppressed [ 354.377238][T10352] netlink: 'syz.1.1215': attribute type 21 has an invalid length. [ 354.403460][T10352] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1215'. [ 354.591233][T10358] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1216'. [ 354.647883][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.685310][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.755161][T10358] batadv_slave_1: entered promiscuous mode [ 355.265160][T10361] tap1: tun_chr_ioctl cmd 1074025677 [ 355.270967][T10361] tap1: linktype set to 6 [ 355.654773][T10371] netlink: 'syz.1.1220': attribute type 3 has an invalid length. [ 355.676470][T10371] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1220'. [ 356.326022][T10387] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1223'. [ 356.850165][T10398] netlink: 'syz.2.1228': attribute type 1 has an invalid length. [ 356.858928][T10398] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1228'. [ 358.310202][T10425] syzkaller0: left promiscuous mode [ 358.332478][T10425] syzkaller0: left allmulticast mode [ 358.365061][T10434] netlink: 'syz.0.1238': attribute type 17 has an invalid length. [ 358.383753][T10434] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 358.700339][T10437] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 358.952829][T10437] team0: Device wg1 is of different type [ 359.091888][T10451] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1242'. [ 359.283951][T10455] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 359.329073][T10455] sctp: [Deprecated]: syz.1.1243 (pid 10455) Use of int in maxseg socket option. [ 359.329073][T10455] Use struct sctp_assoc_value instead [ 359.909252][T10473] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1248'. [ 360.135984][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.143480][T10479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.246413][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.253911][T10479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.314143][ T1077] tipc: Subscription rejected, illegal request [ 360.351421][T10479] bond0: (slave batadv0): Releasing backup interface [ 360.360759][T10479] batadv0 (unregistering): left promiscuous mode [ 360.368156][T10479] batadv0 (unregistering): left allmulticast mode [ 360.384116][T10478] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 360.464440][T10478] geneve0: entered promiscuous mode [ 361.099417][T10502] netlink: 'syz.1.1256': attribute type 19 has an invalid length. [ 361.115916][T10502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 361.132366][T10507] netlink: 'syz.1.1256': attribute type 19 has an invalid length. [ 361.140651][T10507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 361.488930][T10512] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1259'. [ 361.629105][T10514] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1260'. [ 362.225041][T10522] netlink: 'syz.2.1262': attribute type 10 has an invalid length. [ 362.243713][T10524] netlink: 'syz.1.1263': attribute type 3 has an invalid length. [ 362.261851][T10522] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1262'. [ 362.262213][T10524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1263'. [ 362.650923][T10537] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'. [ 363.469973][T10559] netlink: 'syz.0.1274': attribute type 10 has an invalid length. [ 363.504785][T10559] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1274'. [ 364.013261][T10559] veth0_macvtap: left promiscuous mode [ 364.865562][T10567] syzkaller0: entered promiscuous mode [ 364.871146][T10567] syzkaller0: entered allmulticast mode [ 365.637706][T10586] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 365.656682][T10586] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1282'. [ 365.697816][T10580] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1280'. [ 365.716337][T10580] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 365.728308][T10580] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1280'. [ 366.272683][T10610] syzkaller0: entered promiscuous mode [ 366.283896][T10610] syzkaller0: entered allmulticast mode [ 368.396837][T10612] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 368.408407][T10616] bridge_slave_1: left allmulticast mode [ 368.414120][T10616] bridge_slave_1: left promiscuous mode [ 368.421238][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.438163][T10616] bridge_slave_0: left promiscuous mode [ 368.444337][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.527242][T10616] bond0: (slave bridge0): Releasing backup interface [ 368.621464][T10617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 368.633843][T10630] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1294'. [ 368.647527][T10630] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 368.657266][T10633] netlink: 'syz.0.1293': attribute type 10 has an invalid length. [ 369.151394][T10644] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1303'. [ 369.167004][T10649] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1299'. [ 369.811687][T10659] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1301'. [ 373.428813][T10713] can: request_module (can-proto-0) failed. [ 374.212331][T10718] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1318'. [ 374.227319][T10718] netlink: zone id is out of range [ 374.232539][T10718] netlink: zone id is out of range [ 374.245326][T10718] netlink: zone id is out of range [ 374.250517][T10718] netlink: zone id is out of range [ 374.271238][T10718] netlink: zone id is out of range [ 374.283168][T10718] netlink: zone id is out of range [ 374.290331][T10718] netlink: zone id is out of range [ 374.296131][T10718] netlink: zone id is out of range [ 374.307349][T10718] netlink: zone id is out of range [ 374.320860][T10718] netlink: zone id is out of range [ 374.496161][T10729] netlink: 'syz.1.1322': attribute type 3 has an invalid length. [ 374.514989][T10729] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1322'. [ 374.550284][T10729] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1322'. [ 374.710541][T10734] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1322'. [ 374.938977][T10745] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 374.953534][T10745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1325'. [ 375.333393][T10762] netlink: 'syz.2.1330': attribute type 64 has an invalid length. [ 377.216733][T10817] syz.0.1344: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 377.234065][T10817] CPU: 0 PID: 10817 Comm: syz.0.1344 Not tainted syzkaller #0 [ 377.241577][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 377.251657][T10817] Call Trace: [ 377.254970][T10817] [ 377.257926][T10817] dump_stack_lvl+0x18c/0x250 [ 377.262652][T10817] ? show_regs_print_info+0x20/0x20 [ 377.267895][T10817] ? load_image+0x420/0x420 [ 377.272458][T10817] ? __rcu_read_unlock+0x7c/0xd0 [ 377.277466][T10817] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 377.283952][T10817] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 377.290509][T10817] warn_alloc+0x246/0x340 [ 377.294885][T10817] ? stack_trace_save+0xaa/0x100 [ 377.299962][T10817] ? zone_watermark_ok_safe+0x230/0x230 [ 377.305574][T10817] ? kasan_set_track+0x5f/0x70 [ 377.310368][T10817] ? kasan_set_track+0x4e/0x70 [ 377.315167][T10817] ? __kasan_kmalloc+0x8f/0xa0 [ 377.319963][T10817] ? xsk_init_queue+0xad/0x100 [ 377.324774][T10817] ? xsk_setsockopt+0x4e5/0x760 [ 377.329659][T10817] ? do_sock_setsockopt+0x175/0x1a0 [ 377.334939][T10817] ? __x64_sys_setsockopt+0x182/0x200 [ 377.340347][T10817] __vmalloc_node_range+0x126/0x1330 [ 377.345698][T10817] ? free_vm_area+0x50/0x50 [ 377.350332][T10817] vmalloc_user+0x74/0x80 [ 377.354697][T10817] ? xskq_create+0xbf/0x170 [ 377.359236][T10817] xskq_create+0xbf/0x170 [ 377.363604][T10817] xsk_init_queue+0xad/0x100 [ 377.368244][T10817] xsk_setsockopt+0x4e5/0x760 [ 377.372964][T10817] ? xsk_poll+0x680/0x680 [ 377.377336][T10817] ? __fget_files+0x28/0x4b0 [ 377.381961][T10817] ? __fget_files+0x28/0x4b0 [ 377.386681][T10817] ? aa_sock_opt_perm+0x74/0x100 [ 377.391663][T10817] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 377.397326][T10817] ? security_socket_setsockopt+0x7e/0xa0 [ 377.403072][T10817] ? xsk_poll+0x680/0x680 [ 377.407443][T10817] do_sock_setsockopt+0x175/0x1a0 [ 377.412499][T10817] ? __fdget+0x180/0x210 [ 377.416788][T10817] __x64_sys_setsockopt+0x182/0x200 [ 377.422025][T10817] do_syscall_64+0x55/0xa0 [ 377.426507][T10817] ? clear_bhb_loop+0x40/0x90 [ 377.431224][T10817] ? clear_bhb_loop+0x40/0x90 [ 377.435947][T10817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.441883][T10817] RIP: 0033:0x7f19a199c819 [ 377.446417][T10817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.466140][T10817] RSP: 002b:00007f199e726028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.474587][T10817] RAX: ffffffffffffffda RBX: 00007f19a1c16630 RCX: 00007f19a199c819 [ 377.482588][T10817] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000014 [ 377.490592][T10817] RBP: 00007f19a1a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 377.498603][T10817] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 377.506598][T10817] R13: 00007f19a1c166c8 R14: 00007f19a1c16630 R15: 00007ffc03202578 [ 377.514614][T10817] [ 377.532746][T10817] Mem-Info: [ 377.536065][T10817] active_anon:6448 inactive_anon:0 isolated_anon:0 [ 377.536065][T10817] active_file:14790 inactive_file:40044 isolated_file:0 [ 377.536065][T10817] unevictable:768 dirty:135 writeback:0 [ 377.536065][T10817] slab_reclaimable:10323 slab_unreclaimable:98604 [ 377.536065][T10817] mapped:29281 shmem:1361 pagetables:583 [ 377.536065][T10817] sec_pagetables:0 bounce:0 [ 377.536065][T10817] kernel_misc_reclaimable:0 [ 377.536065][T10817] free:1346353 free_pcp:8682 free_cma:0 [ 377.582737][T10817] Node 0 active_anon:25792kB inactive_anon:0kB active_file:59160kB inactive_file:159976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117124kB dirty:536kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11092kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no [ 377.616872][T10817] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 377.654573][T10817] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.683463][T10817] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 377.689593][T10817] Node 0 DMA32 free:1474876kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25756kB inactive_anon:0kB active_file:59160kB inactive_file:159148kB unevictable:1536kB writepending:536kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:17472kB local_pcp:10624kB free_cma:0kB [ 377.722400][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 377.727462][T10817] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 377.760929][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 377.766194][T10817] Node 1 Normal free:3895176kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:9184kB free_cma:0kB [ 377.798053][T10817] lowmem_reserve[]: 0 0 0 0 0 [ 377.802848][T10817] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.817552][T10817] Node 0 DMA32: 483*4kB (UME) 1532*8kB (UME) 1329*16kB (UME) 1532*32kB (UME) 305*64kB (UME) 72*128kB (UME) 31*256kB (ME) 18*512kB (M) 19*1024kB (ME) 19*2048kB (UM) 314*4096kB (M) = 1474876kB [ 377.838259][T10817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 377.850426][T10817] Node 1 Normal: 264*4kB (UME) 65*8kB (UME) 38*16kB (UME) 114*32kB (UME) 31*64kB (UE) 8*128kB (UME) 1*256kB (E) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3895176kB [ 377.874121][T10817] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.884367][T10817] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.895526][T10817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 377.905647][T10817] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 377.916647][T10817] 56195 total pagecache pages [ 377.921354][T10817] 0 pages in swap cache [ 377.926124][T10817] Free swap = 124996kB [ 377.930377][T10817] Total swap = 124996kB [ 377.934561][T10817] 2097051 pages RAM [ 377.940250][T10817] 0 pages HighMem/MovableOnly [ 377.945308][T10817] 416926 pages reserved [ 377.949646][T10817] 0 pages cma reserved [ 378.916777][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.923209][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.262638][T10849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1356'. [ 380.285041][T10850] netlink: 'syz.0.1353': attribute type 21 has an invalid length. [ 383.227514][T10863] delete_channel: no stack [ 383.347817][T10870] netlink: 'syz.1.1362': attribute type 6 has an invalid length. [ 383.368725][T10870] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 383.377808][T10870] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1362'. [ 383.522478][T10869] delete_channel: no stack [ 384.832520][T10916] netlink: 'syz.2.1376': attribute type 17 has an invalid length. [ 384.848706][T10916] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1376'. [ 384.863795][T10916] net_ratelimit: 456 callbacks suppressed [ 384.863836][T10916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.890684][T10917] netlink: 'syz.1.1375': attribute type 2 has an invalid length. [ 384.900705][T10917] netlink: 'syz.1.1375': attribute type 11 has an invalid length. [ 384.908915][T10917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1375'. [ 384.921320][T10921] netlink: 'syz.3.1377': attribute type 10 has an invalid length. [ 384.932546][T10921] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1377'. [ 384.947238][T10921] veth0_macvtap: left promiscuous mode [ 385.020088][T10920] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1376'. [ 385.357932][T10937] netlink: 'syz.3.1383': attribute type 10 has an invalid length. [ 385.739208][T10946] syzkaller0: entered promiscuous mode [ 385.745881][T10946] syzkaller0: entered allmulticast mode [ 386.328303][T10953] FAULT_INJECTION: forcing a failure. [ 386.328303][T10953] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 386.342263][T10953] CPU: 1 PID: 10953 Comm: syz.2.1388 Not tainted syzkaller #0 [ 386.349785][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.359891][T10953] Call Trace: [ 386.363217][T10953] [ 386.366188][T10953] dump_stack_lvl+0x18c/0x250 [ 386.370935][T10953] ? show_regs_print_info+0x20/0x20 [ 386.376201][T10953] ? load_image+0x420/0x420 [ 386.380773][T10953] ? __might_fault+0xaa/0x120 [ 386.385496][T10953] ? __lock_acquire+0x7d40/0x7d40 [ 386.390578][T10953] should_fail_ex+0x39d/0x4d0 [ 386.395313][T10953] _copy_from_user+0x2f/0xe0 [ 386.399963][T10953] ___sys_sendmsg+0x1c7/0x360 [ 386.404689][T10953] ? get_pid_task+0x20/0x1e0 [ 386.409354][T10953] ? __sys_sendmsg+0x2a0/0x2a0 [ 386.414275][T10953] ? __lock_acquire+0x7d40/0x7d40 [ 386.419381][T10953] __se_sys_sendmsg+0x1c2/0x2b0 [ 386.424284][T10953] ? __x64_sys_sendmsg+0x80/0x80 [ 386.429292][T10953] ? lockdep_hardirqs_on+0x98/0x150 [ 386.434633][T10953] do_syscall_64+0x55/0xa0 [ 386.439090][T10953] ? clear_bhb_loop+0x40/0x90 [ 386.443816][T10953] ? clear_bhb_loop+0x40/0x90 [ 386.448535][T10953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.454450][T10953] RIP: 0033:0x7fa148b9c819 [ 386.458877][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.478522][T10953] RSP: 002b:00007fa149b2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.487009][T10953] RAX: ffffffffffffffda RBX: 00007fa148e16090 RCX: 00007fa148b9c819 [ 386.495007][T10953] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 386.502992][T10953] RBP: 00007fa149b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 386.510978][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.518961][T10953] R13: 00007fa148e16128 R14: 00007fa148e16090 R15: 00007ffd49168f68 [ 386.526961][T10953] [ 388.953106][T10958] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 388.961401][T10958] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1389'. [ 388.974911][T10980] netlink: 'syz.1.1397': attribute type 4 has an invalid length. [ 389.193276][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 389.292421][T10986] netlink: 'syz.3.1398': attribute type 10 has an invalid length. [ 389.464425][T10986] netlink: 'syz.3.1398': attribute type 9 has an invalid length. [ 389.484899][T10986] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1398'. [ 389.497522][T10993] netlink: 'syz.0.1401': attribute type 2 has an invalid length. [ 389.515224][T10993] netlink: 'syz.0.1401': attribute type 8 has an invalid length. [ 389.533987][T10993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1401'. [ 390.360932][T11014] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 390.375651][T11014] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1406'. [ 390.507675][T11017] delete_channel: no stack [ 390.700239][T11030] netlink: 'syz.3.1410': attribute type 10 has an invalid length. [ 390.764839][T11030] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 390.772458][T11030] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 390.796177][T11030] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 390.821125][T11028] netlink: 'syz.1.1412': attribute type 10 has an invalid length. [ 390.840447][T11028] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1412'. [ 391.106871][T11043] netlink: 'syz.3.1417': attribute type 10 has an invalid length. [ 391.126561][T11043] bond0: (slave bond_slave_0): Releasing backup interface [ 391.138865][T11043] bond_slave_0: left promiscuous mode [ 391.158987][T11043] bond_slave_0: left allmulticast mode [ 391.217040][T11046] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1416'. [ 391.267516][T11043] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1417'. [ 391.439407][T11053] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 391.449418][T11053] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1419'. [ 391.524173][T11055] netlink: 'syz.3.1420': attribute type 10 has an invalid length. [ 392.933965][T11077] netlink: 'syz.0.1428': attribute type 10 has an invalid length. [ 395.430509][T11079] netlink: 'syz.3.1429': attribute type 10 has an invalid length. [ 395.463431][T11079] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1429'. [ 396.079468][T11093] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1433'. [ 396.625077][T11108] netlink: 'syz.1.1438': attribute type 21 has an invalid length. [ 396.747894][T11115] netlink: 'syz.1.1440': attribute type 10 has an invalid length. [ 396.757524][T11115] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1440'. [ 396.999707][T11121] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1441'. [ 397.266658][T11128] sit0: entered promiscuous mode [ 397.271698][T11128] sit0: entered allmulticast mode [ 397.293920][T11130] netlink: 'syz.0.1445': attribute type 2 has an invalid length. [ 397.319871][T11130] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 397.341387][T11130] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1445'. [ 397.369359][T11135] netlink: 'syz.0.1445': attribute type 2 has an invalid length. [ 397.389205][T11135] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 397.410669][T11135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1445'. [ 397.763148][T11145] netlink: 'syz.0.1450': attribute type 10 has an invalid length. [ 397.842505][T11145] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1450'. [ 397.897234][T11143] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1449'. [ 397.915414][T11143] openvswitch: netlink: IP tunnel dst address not specified [ 398.121867][T11154] netlink: 'syz.3.1453': attribute type 21 has an invalid length. [ 398.582460][T11173] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 398.628072][T11173] netlink: 'syz.0.1459': attribute type 1 has an invalid length. [ 399.140748][T11185] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1461'. [ 399.371018][T11194] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1463'. [ 399.407724][T11187] tap2: tun_chr_ioctl cmd 1074025677 [ 399.417180][T11187] tap2: linktype set to 778 [ 399.806685][T11202] delete_channel: no stack [ 399.972328][T11213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 399.979986][T11213] IPv6: NLM_F_CREATE should be set when creating new route [ 399.987377][T11213] IPv6: NLM_F_CREATE should be set when creating new route [ 399.994677][T11213] IPv6: NLM_F_CREATE should be set when creating new route [ 400.492332][ T5771] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 400.782842][T11238] __nla_validate_parse: 2 callbacks suppressed [ 400.782883][T11238] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1481'. [ 401.113838][T11257] bond0: left promiscuous mode [ 401.121110][T11257] bond_slave_1: left promiscuous mode [ 401.135521][T11257] bridge0: left promiscuous mode [ 401.151970][T11257] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 401.159758][T11257] bond0: left allmulticast mode [ 401.168422][T11257] bond_slave_1: left allmulticast mode [ 401.174041][T11257] bridge0: left allmulticast mode [ 401.181863][T11257] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 401.225339][T11259] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1482'. [ 401.226500][T11260] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1487'. [ 401.834431][T11279] validate_nla: 7 callbacks suppressed [ 401.834459][T11279] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 401.864047][T11279] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1494'. [ 401.962414][T11281] sit0: entered promiscuous mode [ 401.971450][T11281] sit0: entered allmulticast mode [ 402.215792][T11295] netlink: 'syz.3.1500': attribute type 21 has an invalid length. [ 402.223782][T11295] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1500'. [ 402.322714][T11301] netlink: 'syz.1.1498': attribute type 13 has an invalid length. [ 402.330775][T11301] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1498'. [ 402.362321][T11301] erspan0: refused to change device tx_queue_len [ 402.374979][T11301] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 402.431143][T11301] C: port 1(ip6gretap0) entered blocking state [ 402.440768][T11301] C: port 1(ip6gretap0) entered disabled state [ 402.449224][T11301] ip6gretap0: entered allmulticast mode [ 402.458335][T11301] ip6gretap0: entered promiscuous mode [ 403.506200][T11328] netlink: 'syz.1.1510': attribute type 10 has an invalid length. [ 403.536514][T11328] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1510'. [ 403.615630][T11332] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1509'. [ 404.427216][T11358] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 404.456280][T11358] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1521'. [ 404.745690][T11369] netlink: 'syz.2.1524': attribute type 10 has an invalid length. [ 404.832044][T11369] team0: Device hsr_slave_0 failed to register rx_handler [ 404.843887][T11372] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1524'. [ 405.000470][T11375] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 405.798724][T11405] netlink: 'syz.1.1533': attribute type 21 has an invalid length. [ 405.809102][T11405] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 405.822831][T11404] netlink: 'syz.3.1532': attribute type 3 has an invalid length. [ 405.834664][T11405] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1533'. [ 405.848669][T11404] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 405.862606][T11404] netlink: 130160 bytes leftover after parsing attributes in process `syz.3.1532'. [ 406.668752][T11442] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1542'. [ 407.965165][T11482] netlink: 'syz.1.1554': attribute type 29 has an invalid length. [ 407.973590][T11482] netlink: 'syz.1.1554': attribute type 29 has an invalid length. [ 408.000595][T11482] netlink: 'syz.1.1554': attribute type 29 has an invalid length. [ 408.086185][T11488] netlink: 'syz.1.1554': attribute type 29 has an invalid length. [ 408.175656][T11482] netlink: 'syz.1.1554': attribute type 29 has an invalid length. [ 408.237563][T11482] netlink: 'syz.1.1554': attribute type 29 has an invalid length. [ 408.351221][T11490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.336945][T11545] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1569'. [ 410.723510][T11557] netlink: 'syz.3.1574': attribute type 21 has an invalid length. [ 410.757271][T11557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1574'. [ 410.784851][T11557] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 410.792790][T11553] netlink: 'syz.1.1573': attribute type 10 has an invalid length. [ 410.828053][T11553] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1573'. [ 410.842676][T11557] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 410.874893][T11557] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.1574'. [ 411.016832][T11564] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1575'. [ 411.052477][T11568] netlink: 39675 bytes leftover after parsing attributes in process `syz.2.1576'. [ 412.394938][T11592] bridge_slave_1: left allmulticast mode [ 412.425690][T11592] bridge_slave_1: left promiscuous mode [ 412.453183][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.425984][T11592] bridge_slave_0: left allmulticast mode [ 414.431716][T11592] bridge_slave_0: left promiscuous mode [ 414.446366][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.936670][T11592] .`: (slave bridge0): Releasing backup interface [ 414.955456][T11594] delete_channel: no stack [ 416.385433][T11639] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1595'. [ 416.428204][T11639] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.619007][T11643] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1596'. [ 416.938498][T11644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1596'. [ 417.873479][T11666] validate_nla: 13 callbacks suppressed [ 417.873502][T11666] netlink: 'syz.2.1602': attribute type 2 has an invalid length. [ 417.898052][T11666] netlink: 'syz.2.1602': attribute type 4 has an invalid length. [ 417.907511][T11666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1602'. [ 419.388655][T11676] netlink: 'syz.1.1604': attribute type 10 has an invalid length. [ 419.430440][T11676] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1604'. [ 420.000785][T11697] netlink: 'syz.2.1611': attribute type 11 has an invalid length. [ 420.011034][T11697] netlink: 212808 bytes leftover after parsing attributes in process `syz.2.1611'. [ 420.210217][T11713] netlink: 'syz.0.1615': attribute type 21 has an invalid length. [ 420.219958][T11713] netlink: 'syz.0.1615': attribute type 4 has an invalid length. [ 420.228605][T11713] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1615'. [ 420.478642][T11706] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 420.494802][T11706] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1614'. [ 420.533987][T11706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1614'. [ 420.557522][T11706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1614'. [ 420.789694][T11722] openvswitch: netlink: Flow actions attr not present in new flow. [ 422.407858][T11743] __nla_validate_parse: 1 callbacks suppressed [ 422.407880][T11743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1623'. [ 422.498548][T11743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1623'. [ 422.601919][T11747] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1623'. [ 422.664087][T11745] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1623'. [ 423.915315][T11770] netlink: zone id is out of range [ 423.920534][T11770] netlink: set zone limit has 8 unknown bytes [ 424.240750][T11781] FAULT_INJECTION: forcing a failure. [ 424.240750][T11781] name failslab, interval 1, probability 0, space 0, times 0 [ 424.254742][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1630'. [ 424.289850][T11781] CPU: 1 PID: 11781 Comm: syz.3.1631 Not tainted syzkaller #0 [ 424.297527][T11781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 424.307644][T11781] Call Trace: [ 424.311077][T11781] [ 424.314090][T11781] dump_stack_lvl+0x18c/0x250 [ 424.318853][T11781] ? show_regs_print_info+0x20/0x20 [ 424.324126][T11781] ? load_image+0x420/0x420 [ 424.328716][T11781] ? __might_sleep+0xe0/0xe0 [ 424.333400][T11781] ? __lock_acquire+0x7d40/0x7d40 [ 424.338621][T11781] should_fail_ex+0x39d/0x4d0 [ 424.343469][T11781] should_failslab+0x9/0x20 [ 424.348016][T11781] slab_pre_alloc_hook+0x59/0x310 [ 424.353087][T11781] kmem_cache_alloc_node+0x60/0x320 [ 424.358338][T11781] ? __alloc_skb+0x103/0x2c0 [ 424.362963][T11781] __alloc_skb+0x103/0x2c0 [ 424.367409][T11781] ovs_dp_cmd_set+0x6b/0x3a0 [ 424.372073][T11781] genl_family_rcv_msg_doit+0x211/0x310 [ 424.377646][T11781] ? end_current_label_crit_section+0x170/0x170 [ 424.383929][T11781] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 424.389872][T11781] ? bpf_lsm_capable+0x9/0x10 [ 424.394599][T11781] ? security_capable+0x89/0xb0 [ 424.399513][T11781] genl_rcv_msg+0x619/0x7a0 [ 424.404054][T11781] ? genl_bind+0x360/0x360 [ 424.408489][T11781] ? ovs_dp_cmd_dump+0x300/0x300 [ 424.413458][T11781] ? perf_trace_lock+0x304/0x3b0 [ 424.418451][T11781] netlink_rcv_skb+0x241/0x4d0 [ 424.423272][T11781] ? genl_bind+0x360/0x360 [ 424.427751][T11781] ? netlink_ack+0x1180/0x1180 [ 424.432585][T11781] ? __lock_acquire+0x7d40/0x7d40 [ 424.437662][T11781] ? down_read+0x1ac/0x2e0 [ 424.442111][T11781] genl_rcv+0x28/0x40 [ 424.446125][T11781] netlink_unicast+0x751/0x8d0 [ 424.450939][T11781] netlink_sendmsg+0x8d0/0xbf0 [ 424.455827][T11781] ? perf_trace_lock+0x304/0x3b0 [ 424.460798][T11781] ? netlink_getsockopt+0x590/0x590 [ 424.466035][T11781] ? aa_sock_msg_perm+0x94/0x150 [ 424.471053][T11781] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.476374][T11781] ? security_socket_sendmsg+0x80/0xa0 [ 424.481859][T11781] ? netlink_getsockopt+0x590/0x590 [ 424.487099][T11781] ____sys_sendmsg+0x5ba/0x960 [ 424.491933][T11781] ? __asan_memset+0x22/0x40 [ 424.496576][T11781] ? __sys_sendmsg_sock+0x30/0x30 [ 424.501640][T11781] ? __import_iovec+0x5f2/0x850 [ 424.506539][T11781] ? import_iovec+0x73/0xa0 [ 424.511084][T11781] ___sys_sendmsg+0x2a6/0x360 [ 424.515885][T11781] ? __sys_sendmsg+0x2a0/0x2a0 [ 424.520719][T11781] ? __lock_acquire+0x7d40/0x7d40 [ 424.525912][T11781] __se_sys_sendmsg+0x1c2/0x2b0 [ 424.530795][T11781] ? __x64_sys_sendmsg+0x80/0x80 [ 424.535822][T11781] ? lockdep_hardirqs_on+0x98/0x150 [ 424.541144][T11781] do_syscall_64+0x55/0xa0 [ 424.545580][T11781] ? clear_bhb_loop+0x40/0x90 [ 424.550283][T11781] ? clear_bhb_loop+0x40/0x90 [ 424.554991][T11781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.560910][T11781] RIP: 0033:0x7fe253d9c819 [ 424.565361][T11781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.585095][T11781] RSP: 002b:00007fe254bb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.593663][T11781] RAX: ffffffffffffffda RBX: 00007fe254015fa0 RCX: 00007fe253d9c819 [ 424.601680][T11781] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 424.609685][T11781] RBP: 00007fe254bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 424.617704][T11781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.625711][T11781] R13: 00007fe254016038 R14: 00007fe254015fa0 R15: 00007fff62e42788 [ 424.633750][T11781] [ 425.897319][T11800] netlink: 'syz.0.1636': attribute type 10 has an invalid length. [ 425.934689][T11800] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1636'. [ 426.946595][T11810] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1639'. [ 427.187115][T11810] netlink: 'syz.3.1639': attribute type 16 has an invalid length. [ 427.205799][T11810] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1639'. [ 429.144418][T11839] netlink: 'syz.1.1647': attribute type 27 has an invalid length. [ 429.164291][T11839] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1647'. [ 429.186177][T11839] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.225273][T11843] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1649'. [ 429.436555][T11843] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.477194][T11843] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 429.525265][T11843] .` (unregistering): Released all slaves [ 430.317197][T11850] netlink: 'syz.1.1651': attribute type 10 has an invalid length. [ 430.329433][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.346072][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.367583][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.385257][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.398740][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.411765][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.430641][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.442060][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.482842][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.515923][T11850] netlink: 'syz.1.1651': attribute type 11 has an invalid length. [ 430.556959][T11850] netlink: 'syz.1.1651': attribute type 4 has an invalid length. [ 430.587617][T11850] netlink: 'syz.1.1651': attribute type 5 has an invalid length. [ 430.635305][T11850] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.1651'. [ 431.407333][T11862] netlink: 'syz.3.1653': attribute type 10 has an invalid length. [ 431.454940][T11862] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1653'. [ 431.534864][T11862] bond0: entered promiscuous mode [ 431.662804][T11862] bond_slave_1: entered promiscuous mode [ 431.722242][T11862] bridge0: entered promiscuous mode [ 431.775122][T11862] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 431.804209][T11862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.818944][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1653'. [ 431.829146][T11862] bridge0: port 3(bond0) entered blocking state [ 431.864948][T11862] bridge0: port 3(bond0) entered disabled state [ 431.871529][T11862] bond0: entered allmulticast mode [ 431.894907][T11862] bond_slave_1: entered allmulticast mode [ 431.924714][T11862] bridge0: entered allmulticast mode [ 431.943557][T11862] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 431.989238][T11862] bond0: left allmulticast mode [ 432.002664][T11862] bond_slave_1: left allmulticast mode [ 432.036076][T11862] bridge0: left allmulticast mode [ 432.051575][T11862] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 432.077133][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1653'. [ 433.988407][T11910] netlink: 'syz.2.1664': attribute type 10 has an invalid length. [ 434.024727][T11910] netlink: 'syz.2.1664': attribute type 4 has an invalid length. [ 434.073485][T11910] netlink: 'syz.2.1664': attribute type 5 has an invalid length. [ 434.104074][T11910] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.1664'. [ 435.479910][T11938] syzkaller0: entered promiscuous mode [ 435.505065][T11938] syzkaller0: entered allmulticast mode [ 435.674417][T11951] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1679'. [ 435.847861][T11951] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1679'. [ 435.866700][T11954] netlink: 'syz.1.1680': attribute type 21 has an invalid length. [ 435.889605][T11954] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1680'. [ 437.089059][T11982] FAULT_INJECTION: forcing a failure. [ 437.089059][T11982] name failslab, interval 1, probability 0, space 0, times 0 [ 437.153492][T11982] CPU: 0 PID: 11982 Comm: syz.0.1688 Not tainted syzkaller #0 [ 437.161097][T11982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.171253][T11982] Call Trace: [ 437.174629][T11982] [ 437.177642][T11982] dump_stack_lvl+0x18c/0x250 [ 437.182444][T11982] ? show_regs_print_info+0x20/0x20 [ 437.187754][T11982] ? load_image+0x420/0x420 [ 437.192393][T11982] ? verify_lock_unused+0x140/0x140 [ 437.197699][T11982] ? perf_trace_lock_acquire+0x104/0x410 [ 437.203518][T11982] should_fail_ex+0x39d/0x4d0 [ 437.208351][T11982] should_failslab+0x9/0x20 [ 437.212953][T11982] slab_pre_alloc_hook+0x59/0x310 [ 437.218113][T11982] kmem_cache_alloc+0x5a/0x2d0 [ 437.223001][T11982] ? skb_clone+0x1eb/0x370 [ 437.227554][T11982] skb_clone+0x1eb/0x370 [ 437.231924][T11982] __netlink_deliver_tap+0x41c/0x830 [ 437.237387][T11982] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.242679][T11982] netlink_deliver_tap+0x19c/0x1b0 [ 437.247852][T11982] netlink_sendskb+0x68/0x130 [ 437.252597][T11982] netlink_ack+0xce1/0x1180 [ 437.257218][T11982] ? genl_bind+0x360/0x360 [ 437.261686][T11982] ? netlink_dump+0xe50/0xe50 [ 437.266476][T11982] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 437.273348][T11982] netlink_rcv_skb+0x2c5/0x4d0 [ 437.278178][T11982] ? genl_bind+0x360/0x360 [ 437.282685][T11982] ? netlink_ack+0x1180/0x1180 [ 437.287558][T11982] ? __lock_acquire+0x7d40/0x7d40 [ 437.292669][T11982] ? down_read+0x1ac/0x2e0 [ 437.297146][T11982] genl_rcv+0x28/0x40 [ 437.301184][T11982] netlink_unicast+0x751/0x8d0 [ 437.306053][T11982] netlink_sendmsg+0x8d0/0xbf0 [ 437.311318][T11982] ? perf_trace_lock+0x304/0x3b0 [ 437.316336][T11982] ? netlink_getsockopt+0x590/0x590 [ 437.321601][T11982] ? aa_sock_msg_perm+0x94/0x150 [ 437.326598][T11982] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 437.331937][T11982] ? security_socket_sendmsg+0x80/0xa0 [ 437.337439][T11982] ? netlink_getsockopt+0x590/0x590 [ 437.342696][T11982] ____sys_sendmsg+0x5ba/0x960 [ 437.347536][T11982] ? __asan_memset+0x22/0x40 [ 437.352185][T11982] ? __sys_sendmsg_sock+0x30/0x30 [ 437.357253][T11982] ? __import_iovec+0x5f2/0x850 [ 437.362195][T11982] ? import_iovec+0x73/0xa0 [ 437.366766][T11982] ___sys_sendmsg+0x2a6/0x360 [ 437.371606][T11982] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.376512][T11982] ? __lock_acquire+0x7d40/0x7d40 [ 437.381780][T11982] __se_sys_sendmsg+0x1c2/0x2b0 [ 437.386710][T11982] ? __x64_sys_sendmsg+0x80/0x80 [ 437.391759][T11982] ? lockdep_hardirqs_on+0x98/0x150 [ 437.397036][T11982] do_syscall_64+0x55/0xa0 [ 437.401495][T11982] ? clear_bhb_loop+0x40/0x90 [ 437.406217][T11982] ? clear_bhb_loop+0x40/0x90 [ 437.410967][T11982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.416932][T11982] RIP: 0033:0x7f19a199c819 [ 437.421422][T11982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.441075][T11982] RSP: 002b:00007f19a2782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.449543][T11982] RAX: ffffffffffffffda RBX: 00007f19a1c15fa0 RCX: 00007f19a199c819 [ 437.457649][T11982] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 437.465663][T11982] RBP: 00007f19a2782090 R08: 0000000000000000 R09: 0000000000000000 [ 437.473760][T11982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.481773][T11982] R13: 00007f19a1c16038 R14: 00007f19a1c15fa0 R15: 00007ffc03202578 [ 437.489852][T11982] [ 438.457422][T12002] netlink: 'syz.3.1694': attribute type 10 has an invalid length. [ 438.554159][T12002] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1694'. [ 438.698558][T12004] netlink: 'syz.1.1696': attribute type 10 has an invalid length. [ 438.729600][T12004] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1696'. [ 438.778453][T12002] pimreg0: tun_chr_ioctl cmd 35111 [ 438.967848][T12010] ================================================================== [ 438.975990][T12010] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 438.983833][T12010] Write of size 72 at addr ffff888021813210 by task syz.2.1697/12010 [ 438.991955][T12010] [ 438.994423][T12010] CPU: 0 PID: 12010 Comm: syz.2.1697 Not tainted syzkaller #0 [ 439.001902][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.011985][T12010] Call Trace: [ 439.015312][T12010] [ 439.018455][T12010] dump_stack_lvl+0x18c/0x250 [ 439.023187][T12010] ? __lock_acquire+0x7d40/0x7d40 [ 439.028258][T12010] ? show_regs_print_info+0x20/0x20 [ 439.033651][T12010] ? load_image+0x420/0x420 [ 439.038199][T12010] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 439.043788][T12010] ? __virt_addr_valid+0x18c/0x540 [ 439.048932][T12010] ? __virt_addr_valid+0x469/0x540 [ 439.054088][T12010] print_report+0xa8/0x210 [ 439.058537][T12010] ? __bpf_get_stackid+0x6bf/0x900 [ 439.063677][T12010] kasan_report+0x117/0x150 [ 439.068210][T12010] ? __bpf_get_stackid+0x6bf/0x900 [ 439.073423][T12010] kasan_check_range+0x241/0x290 [ 439.078482][T12010] ? __bpf_get_stackid+0x6bf/0x900 [ 439.083622][T12010] __asan_memcpy+0x40/0x70 [ 439.088067][T12010] __bpf_get_stackid+0x6bf/0x900 [ 439.093049][T12010] bpf_get_stackid_pe+0x343/0x410 [ 439.098112][T12010] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 439.103608][T12010] bpf_overflow_handler+0x1fc/0x510 [ 439.108840][T12010] ? perf_prepare_header+0x1e0/0x1e0 [ 439.114152][T12010] ? bpf_overflow_handler+0xde/0x510 [ 439.119477][T12010] ? tp_perf_event_destroy+0x20/0x20 [ 439.124792][T12010] ? perf_trace_preemptirq_template+0xac/0x330 [ 439.130987][T12010] ? __perf_event_account_interrupt+0x187/0x280 [ 439.137256][T12010] __perf_event_overflow+0x447/0x630 [ 439.142578][T12010] perf_swevent_event+0x319/0x570 [ 439.147638][T12010] ? perf_tp_event+0x1520/0x1520 [ 439.152614][T12010] ___perf_sw_event+0x4a7/0x730 [ 439.157499][T12010] ? ___perf_sw_event+0x199/0x730 [ 439.162724][T12010] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 439.169166][T12010] ? __lock_acquire+0x1347/0x7d40 [ 439.174227][T12010] ? rep_movs_alternative+0x4a/0x90 [ 439.179477][T12010] ? verify_lock_unused+0x140/0x140 [ 439.184800][T12010] ? kasan_set_track+0x5f/0x70 [ 439.189681][T12010] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 439.195686][T12010] ? do_syscall_64+0x55/0xa0 [ 439.200300][T12010] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.206422][T12010] ? lock_chain_count+0x20/0x20 [ 439.211309][T12010] __perf_sw_event+0x139/0x270 [ 439.216193][T12010] do_user_addr_fault+0x123e/0x12c0 [ 439.221511][T12010] ? rcu_is_watching+0x15/0xb0 [ 439.226313][T12010] exc_page_fault+0x64/0x100 [ 439.230933][T12010] asm_exc_page_fault+0x26/0x30 [ 439.235817][T12010] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 439.241650][T12010] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 439.261288][T12010] RSP: 0018:ffffc9001927fbd0 EFLAGS: 00050206 [ 439.267381][T12010] RAX: ffffffff842a1f01 RBX: 000000000000056d RCX: 00000000000004ed [ 439.275376][T12010] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888021e83080 [ 439.283370][T12010] RBP: ffffc9001927fd20 R08: 0000000000000004 R09: 0000000000000005 [ 439.291363][T12010] R10: dffffc0000000000 R11: ffffed10043d06ad R12: 00002000000024ed [ 439.299410][T12010] R13: 1ffff9200324ffbd R14: ffff888021e83000 R15: 0000200000001f80 [ 439.307498][T12010] ? _copy_from_user+0x11/0xe0 [ 439.312309][T12010] _copy_from_user+0x8b/0xe0 [ 439.316932][T12010] generic_map_update_batch+0x59a/0x810 [ 439.322511][T12010] ? rcu_read_unlock+0xa0/0xa0 [ 439.327304][T12010] ? __fdget+0x180/0x210 [ 439.332207][T12010] ? rcu_read_unlock+0xa0/0xa0 [ 439.337011][T12010] bpf_map_do_batch+0x3d7/0x610 [ 439.341900][T12010] __sys_bpf+0x381/0x890 [ 439.346174][T12010] ? bpf_link_show_fdinfo+0x390/0x390 [ 439.351586][T12010] ? lock_chain_count+0x20/0x20 [ 439.356559][T12010] __x64_sys_bpf+0x7c/0x90 [ 439.361005][T12010] do_syscall_64+0x55/0xa0 [ 439.365444][T12010] ? clear_bhb_loop+0x40/0x90 [ 439.370174][T12010] ? clear_bhb_loop+0x40/0x90 [ 439.374879][T12010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.380801][T12010] RIP: 0033:0x7fa148b9c819 [ 439.385243][T12010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.404977][T12010] RSP: 002b:00007fa149b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.413422][T12010] RAX: ffffffffffffffda RBX: 00007fa148e15fa0 RCX: 00007fa148b9c819 [ 439.421430][T12010] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 439.429428][T12010] RBP: 00007fa148c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 439.437423][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.445444][T12010] R13: 00007fa148e16038 R14: 00007fa148e15fa0 R15: 00007ffd49168f68 [ 439.453453][T12010] [ 439.456492][T12010] [ 439.458834][T12010] Allocated by task 12010: [ 439.463285][T12010] kasan_set_track+0x4e/0x70 [ 439.467916][T12010] __kasan_kmalloc+0x8f/0xa0 [ 439.472545][T12010] __kmalloc_node+0xb4/0x230 [ 439.477264][T12010] bpf_map_area_alloc+0x5e/0x110 [ 439.482246][T12010] prealloc_elems_and_freelist+0x86/0x1c0 [ 439.488000][T12010] stack_map_alloc+0x33a/0x4c0 [ 439.492794][T12010] map_create+0x877/0x12f0 [ 439.497249][T12010] __sys_bpf+0x651/0x890 [ 439.501539][T12010] __x64_sys_bpf+0x7c/0x90 [ 439.506045][T12010] do_syscall_64+0x55/0xa0 [ 439.510493][T12010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.516538][T12010] [ 439.518888][T12010] The buggy address belongs to the object at ffff888021813200 [ 439.518888][T12010] which belongs to the cache kmalloc-cg-64 of size 64 [ 439.533061][T12010] The buggy address is located 16 bytes inside of [ 439.533061][T12010] allocated 40-byte region [ffff888021813200, ffff888021813228) [ 439.547060][T12010] [ 439.549407][T12010] The buggy address belongs to the physical page: [ 439.555837][T12010] page:ffffea00008604c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888021813600 pfn:0x21813 [ 439.567754][T12010] memcg:ffff88802f19ea01 [ 439.572023][T12010] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 439.579940][T12010] page_type: 0xffffffff() [ 439.584303][T12010] raw: 00fff00000000800 ffff888017c4da00 ffffea00017b1400 0000000000000003 [ 439.592909][T12010] raw: ffff888021813600 000000008020001b 00000001ffffffff ffff88802f19ea01 [ 439.601511][T12010] page dumped because: kasan: bad access detected [ 439.607942][T12010] page_owner tracks the page as allocated [ 439.613686][T12010] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 11503, tgid 11500 (syz.2.1558), ts 408616730135, free_ts 408598417209 [ 439.633603][T12010] post_alloc_hook+0x1c1/0x200 [ 439.638492][T12010] get_page_from_freelist+0x1951/0x19e0 [ 439.644082][T12010] __alloc_pages+0x1f0/0x460 [ 439.648694][T12010] alloc_slab_page+0x5d/0x160 [ 439.653410][T12010] new_slab+0x87/0x2d0 [ 439.657520][T12010] ___slab_alloc+0xc5d/0x12f0 [ 439.662240][T12010] __kmem_cache_alloc_node+0x19e/0x250 [ 439.667748][T12010] __kmalloc_node+0xa4/0x230 [ 439.672386][T12010] bpf_map_kmalloc_node+0xbc/0x1b0 [ 439.677542][T12010] trie_update_elem+0x169/0xea0 [ 439.682426][T12010] bpf_map_update_value+0x660/0x720 [ 439.687649][T12010] generic_map_update_batch+0x5ec/0x810 [ 439.693220][T12010] bpf_map_do_batch+0x3d7/0x610 [ 439.698100][T12010] __sys_bpf+0x381/0x890 [ 439.702373][T12010] __x64_sys_bpf+0x7c/0x90 [ 439.706902][T12010] do_syscall_64+0x55/0xa0 [ 439.711344][T12010] page last free stack trace: [ 439.716037][T12010] free_unref_page_prepare+0x7b2/0x8c0 [ 439.721534][T12010] free_unref_page+0x32/0x2e0 [ 439.726252][T12010] pipe_read+0x694/0x1310 [ 439.730609][T12010] vfs_read+0x46a/0x970 [ 439.734792][T12010] ksys_read+0x150/0x260 [ 439.739064][T12010] do_syscall_64+0x55/0xa0 [ 439.743499][T12010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.749424][T12010] [ 439.751768][T12010] Memory state around the buggy address: [ 439.757417][T12010] ffff888021813100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 439.765504][T12010] ffff888021813180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 439.773590][T12010] >ffff888021813200: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 439.781682][T12010] ^ [ 439.787089][T12010] ffff888021813280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 439.795177][T12010] ffff888021813300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 439.803274][T12010] ================================================================== [ 439.811447][T12010] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 439.818752][T12010] CPU: 0 PID: 12010 Comm: syz.2.1697 Not tainted syzkaller #0 [ 439.826281][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.836446][T12010] Call Trace: [ 439.839751][T12010] [ 439.842707][T12010] dump_stack_lvl+0x18c/0x250 [ 439.847429][T12010] ? show_regs_print_info+0x20/0x20 [ 439.852756][T12010] ? load_image+0x420/0x420 [ 439.857299][T12010] panic+0x2dc/0x730 [ 439.861231][T12010] ? __lock_acquire+0x7d40/0x7d40 [ 439.866285][T12010] ? bpf_jit_dump+0xd0/0xd0 [ 439.870822][T12010] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 439.876744][T12010] ? _raw_spin_unlock+0x40/0x40 [ 439.881622][T12010] ? __bpf_get_stackid+0x6bf/0x900 [ 439.886850][T12010] check_panic_on_warn+0x84/0xa0 [ 439.891815][T12010] ? __bpf_get_stackid+0x6bf/0x900 [ 439.896956][T12010] end_report+0x6f/0x130 [ 439.901228][T12010] kasan_report+0x128/0x150 [ 439.905759][T12010] ? __bpf_get_stackid+0x6bf/0x900 [ 439.910905][T12010] kasan_check_range+0x241/0x290 [ 439.915966][T12010] ? __bpf_get_stackid+0x6bf/0x900 [ 439.921110][T12010] __asan_memcpy+0x40/0x70 [ 439.925559][T12010] __bpf_get_stackid+0x6bf/0x900 [ 439.930535][T12010] bpf_get_stackid_pe+0x343/0x410 [ 439.935593][T12010] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 439.941078][T12010] bpf_overflow_handler+0x1fc/0x510 [ 439.946311][T12010] ? perf_prepare_header+0x1e0/0x1e0 [ 439.951630][T12010] ? bpf_overflow_handler+0xde/0x510 [ 439.956952][T12010] ? tp_perf_event_destroy+0x20/0x20 [ 439.962270][T12010] ? perf_trace_preemptirq_template+0xac/0x330 [ 439.968460][T12010] ? __perf_event_account_interrupt+0x187/0x280 [ 439.974725][T12010] __perf_event_overflow+0x447/0x630 [ 439.980300][T12010] perf_swevent_event+0x319/0x570 [ 439.985357][T12010] ? perf_tp_event+0x1520/0x1520 [ 439.990324][T12010] ___perf_sw_event+0x4a7/0x730 [ 439.995209][T12010] ? ___perf_sw_event+0x199/0x730 [ 440.000257][T12010] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 440.006695][T12010] ? __lock_acquire+0x1347/0x7d40 [ 440.011744][T12010] ? rep_movs_alternative+0x4a/0x90 [ 440.016969][T12010] ? verify_lock_unused+0x140/0x140 [ 440.022196][T12010] ? kasan_set_track+0x5f/0x70 [ 440.026995][T12010] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 440.033000][T12010] ? do_syscall_64+0x55/0xa0 [ 440.037608][T12010] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.043705][T12010] ? lock_chain_count+0x20/0x20 [ 440.048583][T12010] __perf_sw_event+0x139/0x270 [ 440.053385][T12010] do_user_addr_fault+0x123e/0x12c0 [ 440.058615][T12010] ? rcu_is_watching+0x15/0xb0 [ 440.063404][T12010] exc_page_fault+0x64/0x100 [ 440.068022][T12010] asm_exc_page_fault+0x26/0x30 [ 440.072897][T12010] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 440.078731][T12010] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 440.098366][T12010] RSP: 0018:ffffc9001927fbd0 EFLAGS: 00050206 [ 440.104461][T12010] RAX: ffffffff842a1f01 RBX: 000000000000056d RCX: 00000000000004ed [ 440.112453][T12010] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff888021e83080 [ 440.120450][T12010] RBP: ffffc9001927fd20 R08: 0000000000000004 R09: 0000000000000005 [ 440.128707][T12010] R10: dffffc0000000000 R11: ffffed10043d06ad R12: 00002000000024ed [ 440.136705][T12010] R13: 1ffff9200324ffbd R14: ffff888021e83000 R15: 0000200000001f80 [ 440.144724][T12010] ? _copy_from_user+0x11/0xe0 [ 440.149525][T12010] _copy_from_user+0x8b/0xe0 [ 440.154150][T12010] generic_map_update_batch+0x59a/0x810 [ 440.159887][T12010] ? rcu_read_unlock+0xa0/0xa0 [ 440.164780][T12010] ? __fdget+0x180/0x210 [ 440.169065][T12010] ? rcu_read_unlock+0xa0/0xa0 [ 440.173854][T12010] bpf_map_do_batch+0x3d7/0x610 [ 440.178746][T12010] __sys_bpf+0x381/0x890 [ 440.183019][T12010] ? bpf_link_show_fdinfo+0x390/0x390 [ 440.188428][T12010] ? lock_chain_count+0x20/0x20 [ 440.193322][T12010] __x64_sys_bpf+0x7c/0x90 [ 440.197770][T12010] do_syscall_64+0x55/0xa0 [ 440.202214][T12010] ? clear_bhb_loop+0x40/0x90 [ 440.206919][T12010] ? clear_bhb_loop+0x40/0x90 [ 440.211630][T12010] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.217553][T12010] RIP: 0033:0x7fa148b9c819 [ 440.221990][T12010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.241620][T12010] RSP: 002b:00007fa149b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 440.250064][T12010] RAX: ffffffffffffffda RBX: 00007fa148e15fa0 RCX: 00007fa148b9c819 [ 440.258061][T12010] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 440.266054][T12010] RBP: 00007fa148c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 440.274051][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.282042][T12010] R13: 00007fa148e16038 R14: 00007fa148e15fa0 R15: 00007ffd49168f68 [ 440.290041][T12010] [ 440.293229][T12010] Kernel Offset: disabled [ 440.297550][T12010] Rebooting in 86400 seconds..