last executing test programs: 7.390897196s ago: executing program 1 (id=3156): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x4, 0x8, &(0x7f00000002c0)="b8000005", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) sendmsg$unix(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$ITER_CREATE(0xb, 0x0, 0x0) write$cgroup_int(r11, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50) 5.307781504s ago: executing program 1 (id=3169): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8310, 0x0, 0x7, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) close(0xffffffffffffffff) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb61}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01", 0x15}], 0x1}, 0x4004) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3937) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x7c, &(0x7f0000000480)=""/124}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 4.769122792s ago: executing program 0 (id=3173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2002c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x20000000}, 0xc080, 0x1, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="022d004000040000000100000009000000000000e10ecd3fe885fc07914ae4f97e3fc01b018a9795607040b16141b6c4df204c08d2890b7beb0875e43af987925008aad61e7c06cb392209cc58fcf2ad11fa3cc73c054094b9bb7bf9287bf19a339a2c81f5d9029f48f900e2146034040f8ecae29267526f1933372128188f5b0edaa6868e352aadabb06801cf2c5aced39a2d57b0e42d7f07f7b9254d70e388b1768fc2519a38e4f3", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x184104, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x20, 0x2, 0x40, 0x0, 0x7fffffffffffffff, 0x8, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2ee8, 0x4}, 0x108208, 0x4, 0x4, 0x4, 0x7, 0x1, 0x6, 0x0, 0x5, 0x0, 0x7fffffffffffffff}, 0x0, 0x4, r3, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(0x3) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="1808000000080000000000000000000018000000fdf2ffff000000000080000018100000", @ANYRES32, @ANYBLOB="00000000000000008510000008000000180000000000000000000000000000009500000000000000409000000000000018170000", @ANYRES32=r1, @ANYBLOB="00000000000000209500000000000000988513a30ce64941c34dcd4c1db8af5ceae65ca0dedc96702ba1f8dfa6ce4d59da436cdebc7af04ad69fee701d46ceafbb6650c6f5bd6386c9696fae78daee8dad5d24a8f1ed0d13355e3fa10a5195f8634f8d2a3ac694ff906726ef03f6a6e48d08a5d1f19c1ddf7d513e26d9fc6a4da8ee83923c9da92dbe7dd0749cb258591edeb2e6832627d2c4953b86191245a1495106c80f0aab39bb300064f815c9127614e26530305b8515c4a8e595b25734dc7be081744c6f2bb76ad416a1a23abbeb40390da75faf5bdc8d00"/228], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1d00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000047f1f7e37befc6cc5a48af4333a4c06661dbabf29ea63f7d62036bfdd7d369e237381586c66a03c9cedf71522ba085011435a18c870882ac0ce646f4be4689ea2b881e40b8770044e398ea2df83b66293e1c41c0cad79f71aa20ce7a498f2004e601ec6440fb78e62466226bf8c2f8ffb0b6567bbfe11960e8d0e22e9e37207cf47872fdde33cf44aa291618cca7d3d455cfbd98a0a211ea3aab6027d98bb93fa013ce514d8ed3629a0239064938e5e7a84bedf6ac7cfe8391aa991f811b8edc00"/213, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r1}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) 3.95543631s ago: executing program 1 (id=3175): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000003900)={&(0x7f00000025c0)=@in6={0xa, 0x0, 0x7fff, @private0}, 0x80, 0x0}, 0x20000850) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, &(0x7f0000000100), 0x120) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000000)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}], 0x18}, 0xff00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@cgroup, 0x24, 0x0, 0x80, &(0x7f0000001000)=[0x0], 0x1, 0x0, &(0x7f0000001040)=[0x0], &(0x7f0000001140)=[0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001240)={@cgroup=r7, r0, 0x8, 0xa, r0, @void, @value=r1, @void, @void, r8}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001100), 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="b405000000000000611078000000000007000000000000009500000000000000e655b5a95f1ba9cae620e1ecb1c73520f6fe32243d6063fb4638fd00505e29b0bb2ddcbd4025b1bd7fe7ce5bc668f242675c1517812b72f964af86b1d3ae0c44dfb1f91578b1f8191678c13aaa2dafac0688466daa0f4d30455ac50c6d23bfb616b8988355756c300e2aab0dceed56370516d74895810f26e3d9bd052f93f81343fba3a7d5f655557005f65b4869ab2b6f0a4051e152ab46983f7e92c31239e11812af817d5be9582c4fa5e77e5b8b75bfc0f6825fd8f688cac4667653bd"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, 0x0, 0x300440c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x541b, &(0x7f00000000c0)) 3.604694575s ago: executing program 2 (id=3177): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x80000000, 0xffffffffffffffff}, 0x104101, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000200)=@caif=@util={0x25, "664002d83e01b0e36cd1d7e1774eb026"}, 0x9, 0x0}, 0x2400c050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x9a) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010052b8319471741800000000000000180000001800000007000000050000002100000f48210300000002000000040000000500000000300e006161005d88016db7f53deb81f9009281c39a104fa6bd84579fee65d820984273c644d3e5a597c58b54a0b2e6bf8e67a3e3f4494f1c562b0a759114bef6e934b84bd3076702afcb5d20685398"], 0x0, 0x37, 0x0, 0x9}, 0x28) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d516a807b70500000800000085000000a500000095"], 0x0, 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000d20810000009520e3493ba6816f1aa000099010000000000000000968d7137129eb2263c0000d35f8d245db21015f4b594ba16096c9b0dc155d4adcfa80c50af7dff48d4e4a295bd5c026d9524fb6d88a208a2f9bc1e99b639e038b1357587f1ad83e535f10bf293af56e87e77b8296e8968cec40c0fb057cdb3f93026280075925e6aa872a3a9825b8c025f41cba061e8ed1b0bb59049790f1d0c11fde0f9e659d958e47020f8188e41c48a29b24fcce226687ccf2ca15cf51b71a82d6174fa3a71240e910831caa23038a480bb727e6370bfcc171c353a854f24be8e28cbb4320af937876b27"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000180)=ANY=[@ANYBLOB='b'], 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000a40)={0x5}, 0x8) 3.289211417s ago: executing program 0 (id=3178): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0xd14daa24ae01cc49, 0x0, 0x9, 0x0, 0x3, 0x0, 0x8, 0x80110, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x4, @perf_config_ext={0x0, 0x5d}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3ff, 0xd, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0xd14daa24ae01cc49, 0x0, 0x9, 0x0, 0x3, 0x0, 0x8, 0x80110, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x4, @perf_config_ext={0x0, 0x5d}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x3ff, 0xd, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x1ff) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) (async) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x3}, [@alu={0x3, 0x1, 0x5, 0x1, 0xa, 0x30, 0x4}, @alu={0x4, 0x0, 0x7, 0xa, 0x4, 0x50, 0xfffffffffffffff0}, @generic={0x65, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x57}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x3}, [@alu={0x3, 0x1, 0x5, 0x1, 0xa, 0x30, 0x4}, @alu={0x4, 0x0, 0x7, 0xa, 0x4, 0x50, 0xfffffffffffffff0}, @generic={0x65, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x57}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b30, &(0x7f0000000240)={'wlan1\x00', @multicast}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c0000000740"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800"], 0xfdef) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.466633596s ago: executing program 3 (id=3179): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0x24e, 0xfffffffffffffcb7, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) close(r1) 2.374712752s ago: executing program 2 (id=3180): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000000000000000", @ANYRES32], 0x50) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x13, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0xae, 0x77, &(0x7f0000000440)="4a6adafb6e8c7b192ce21ffc3719ad3ed4570bd870ce9dfe868e9a332f1a416758608c202b3ebc938f984aa12e81d9e0e8e51f74eb39c4a8588b680771bd62792486794464dec968f180b1b08bc908a1f1844c86ef1e9a32aeb872ab2e538e74fdcdd0ff0b016625111d8d4f1e7e6398ba27dd85c77f8d5a7e37ac38cfcc525ad921d249636adc4e9b357acc704c278be85fda65dfb9be52eca047217b5b3e228d864340d3793cfc4f7e53623fe5", &(0x7f0000000500)=""/119, 0x3a, 0x0, 0xf6, 0x6d, &(0x7f0000000580)="5525517d38561ad627cea4293d875257c1c017d7dde94ed3bd0b940031fb8e79caa6910600ecb873a0a640c2e2c8c7ea104af685651650133ed14694aa58c7b53c5fbc5b3a02a1b1ae04cddef13b490f70b1d7175b3cfef68cded11268394086011865852989b13a91f649b69335fc5877c504b0db896601ec9a6290ef2fea180b7e3585ca79bb84c337843d58465f854dcf89ad22de956b92a139727e6becbe7a9c28b5d8b4eac17be539f6aaf3acd0f7fe457ba8bddd18fea4cedf38df7a351325f737be2f32e1744523fd4158424d5433b164bc13cf7a1624466abdaff7bc4619421cd7de50b36c16d0471596bb25d3e54c20497e", &(0x7f0000000680)="9be19f6c9ea330a6e885c16e7e9b2f8fc48150a733e2153fc0235db80eb65322c211f038cbea7bca99305fc66ddabf1b30d90aea34e8d96d7c1942a93705df1c883cd05e696807a9e3b6ae2a76c2f2283b786356e51889a98c4b9f0e95a382d92bcfbe687a92232f7fba10e6d2", 0x7, 0x0, 0x5}, 0x50) r6 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x2, 0x40, 0x92, 0x0, 0x0, 0x0, 0x18000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x4, 0x5, 0x4, 0x3, 0x1bd, 0x3, 0x0, 0x7, 0x0, 0xd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)='.\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r5) 2.112151621s ago: executing program 3 (id=3181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'dummy0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0x200000c3, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.960151542s ago: executing program 3 (id=3182): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff00000000000000010500000010000000000000000000000402"], 0x0, 0x4e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.958969622s ago: executing program 0 (id=3183): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x8, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000580), 0x8, 0xe, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r5, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000003}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r8, 0x6, 0x1b, &(0x7f0000000100)=r11, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x2, 0x1, 0x7, 0xb, 0x2, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0xbb, &(0x7f0000000240)=""/187, 0x41000, 0x8, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x4, 0x4, 0xfff}, 0x10, r5, r7, 0x7, 0x0, &(0x7f0000000780)=[{0x3, 0x2, 0x7, 0x3}, {0x3, 0x4, 0x2, 0xa}, {0x4, 0x1, 0x8, 0x7}, {0x4, 0x1, 0xf, 0x2}, {0x3, 0x1, 0xf, 0x6}, {0x5, 0x3, 0xa, 0x5}, {0x2, 0x1, 0x0, 0x6}], 0x10, 0x46}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xff, 0x7, 0x1, 0x5, 0x0, 0xb25d, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000080), 0xd}, 0x1b, 0x8, 0x5, 0x8, 0x0, 0x8, 0x7, 0x0, 0x7, 0x0, 0x100000000}, 0xffffffffffffffff, 0x7, r0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000100)=""/86) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000300), 0x45) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r13, 0x110, 0x2, &(0x7f00000000c0), 0x4) 1.843262429s ago: executing program 2 (id=3184): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) 1.578739079s ago: executing program 3 (id=3185): socketpair(0x1, 0x5, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x5, 0x11, 0x7, 0x0, 0x3, 0x8008c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0x8}, 0x1035a, 0x5, 0x1000007, 0x9, 0x8, 0x5, 0x5, 0x0, 0x2, 0x0, 0x40000002}, 0x0, 0x8, 0xffffffffffffffff, 0x8) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.401849791s ago: executing program 2 (id=3186): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x9, 0x3, 0x4, 0x46, 0x0, 0x3, 0x14508, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xd, 0x1, @perf_config_ext={0x1e0e, 0x100000001}, 0x200, 0x6, 0x4, 0x0, 0x8, 0xb, 0xe, 0x0, 0x7, 0x0, 0x10001}, 0x0, 0xa, r0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x5, 0xfffffffe, 0x6, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0xd, 0x7f}, 0x4140, 0x8, 0x7ffffffd, 0x8, 0x3, 0xffff, 0xb44b, 0x0, 0x20000000, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xbfffe277, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) 1.365676084s ago: executing program 0 (id=3187): perf_event_open(&(0x7f00000010c0)={0x2, 0x2c, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xf}, 0x10008, 0x0, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xf}, 0x10008, 0x0, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x408, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002340)={&(0x7f0000000680)="1a18942a0a3eb5aaf257c5319ca58ac2a45761e8d103767c76312fa013925ea6ed4673ecdfea3c40c719cceef087d538e4f20a5cb924a665a3aa9e664fe9df839741c984519337c6bd8e89e7ba1205dc021bbf13c23c999b6499e6e1fc46668178289c0c550fee236efbd7791490c805a4a969a9df608b6e1cd13436742fca2d86f53ebf38c53b779e9f0beda754874f18d8c1ae8a1b10f4e483f8e336b33fd64fc0d8108d0fa362b7724a26d2f29be641d6d8b9a48f877c79bc6096e5bc011ae51fe627335c2f4f1fd133e0069d6cd05ca4fc456cc0a03dc1737d053042539b38f98fb9ce4f48b2ba81c4bd338ecaf2752aae2a", &(0x7f00000008c0)=""/244, &(0x7f00000009c0)="feac", &(0x7f0000001340)="4d020c216729c3197382a3a18096b0fd59c0f847b18efa3df17f90f0001490606127765f705b0803c75e33823b5e7e7a54a190cb2e46366fe493837a6630c53ec02fd67d45ad7fd9fc72c0060e98d368ee36c6da261de66f20a93511361d634b961f7513e94f09d2542173ca56a1c72682bcbe7502ee57bb6ec635b1f5372709b7829d145e160743ab47f564e832a31e9466eb6334f165cab004efcce97eb1ca2378fe4a0602cda647b57513208576f91694c2903563cf090b2d720e5cd90b53a608f37392f710b79702c0f53b3d0397d809ee8b15d56a6cc56810c825c1d6876f0d18aa775943a08ad9fb7ce5f4db574cd517eb7909374bbde82d4dff51eae7a4f45afe85e66e92d1f73e304dc5da4196444db33bc5435d0530a89562e384ec101e099674b33b076f11994bab225615b99872f08d994b93582dd195b199de3f6ac04fc480c8ec98a6a77ab850b96ced7b85e02635a422427f7b98424b0443c88207cbf1e564d39061776e66addba826f0ed815de4ecc58648865113dde9ff6e13c92fab54ed2b9783889224a27d0c5fedaa8cfacd83bd6de655e65bb4d11126b6d5306fb5c8292b883f8ed787fc848dcd3f37110c429c680be19b571067ecf7713e31cfe64451f2780704eb22eca210f850719c52f3837ed46936f76a6a07301ece47adc4db11e20a6573fe6f794926a048cfc735926a37840dd1deb39833b1a60dae277889ad9a022f33531ff1ecd1297acc13a3156dea0b8d57d41509c6f426b62b75e697f4937dd764889b00505549b51a4f03355379c8e38e9e7cee75f14eb3272bbedce2fd4ed9f18ec94063d1b4956e7ade91bcb7c5a8a527bd2f63baf088a7484ff9bd96c5231c19d9fc029d887b4f7c7fdfa2c410f2686f7b3e3c094d674cf1b9edf08ce47c088c725c635410a4955df18b5d0f2a0602f95567bbcd8ec427d1a74d5db9dfa65cf5f4873a005c7caf568d9b3749d5bd50c4f5eb471aad425320601514f18a7eabf2f8d78e6fb330b433be3dffc0b9adb8fa224af65a939564cfb35a362ec6cacd1f290d899b9709327b9f2aa6c2e6fa325d7d20446d9e9e92d5c90239b2edf920f26429914a46689ee38b4792b8c7743e8f2d2b4593d91ded5f0bb3cd04edcc83931219a19ffd1542414b5103bafb8d9f8a497288bf63625f91a946d5de53c45f73935745c1c7659ea034f628a0e57c27f0dfb42807c50f94f4604c238eae03d8f2ed9771fafe3d3be20d9357c3c76db87ffc5ee812bb9212c330bbe611d5a93e1391d153f5a1c057d98b048149b9b512b926519bce145f681526de2403b6a5bf52b3c15437536fea5d76ca90dc3578e9a7f9384fbd08276d94bb602c99c14324fe9f9e1238072ea0380d269b5d77db9289dbf846a139e3db0820e9d483484cd15a772faae4041f90325371c71d83ac2681f13a343f71c778e743c8552e0175d2b95a01ae12acd6af9f17666b44938951315a5121038977388427dc3a0bbfcb60607bd03c3de34bb940538e32a26e24c3edfe1a49bf6d45c2071c5c330e1f6f8c0f049399280832299523137e5aeb24a3130cc708ebcf758d1729e1902bd018cf47e2cc8551819223370acd362e1b05d8eefcb38c98b02ab321790126d49a2bf6547f4db331c7d6e115f88434aff56447ba0106c3a2a9c8ec16b66d01cf23ab43dbfa8923506383da46a6e395e9ab5ccc7c82177b44bffab73a56346055005291c3a3fcd6d83857a4ed735d253c8c29b3a03cdca7609f541f5925feb380d97f6804e63f4c5645ce41cd947ef9ff894a4626c133fc39a82bf1377fb02ba7c4dfa11a092b3b90bc201e06837b122aec5239c7a5a21b5b5400f710b52c57f6c23f7b4908e8c0d4333daaf6c1279df4b878c582ab722ad0d3471b6d9a8abdf86c3b44ecfb87b6e1c89fc06231c21f1a0952cd0930480038c79b08f3985cc66b530c17073c9e114e546d58185fbc9a579f0ea7fd72275f5e6e6ff22eead7d224fa9f98eb079d538aadf36cfe737dbb226239b640c7070c169427678a5cce62877355d7da1147c88a084769210cdf0de64b4a9b238f2291e95ff7783a93c97143ed844eb914f3117a82fbdcc4cdadf727c3b9d18e228c0f926a4a1bd5a95a6ffbe5ca3d447190d14920f62eaa5ea6476d35eb398f56810d61b6aee368abb881afa4489df9e8156b4fa893886702108d601fad879b5358e943b82ab5da66af15d36e1050d965b7da238af53804365189ced154c957414e8af9b80f46cbdf96aae5408ad23db155562fef63796ede62a741a592bd35272fc727a94187042b86f1208fdb0c280ade5aac0e773a1f5903a159f5a43d72585da19bc68cf280f599c75a22006f23cdaf6543a928af46bd1d7a4048be8d9705515cc1cf70fa885ba68cdb92ee48bad361301549bdbd8b9eda284eac1668e3a21a3297ff965f93039c0addff1b917def1473137c832e8208c9f88d49c6724b6da08bc2a5351c56c6f4829153b90e50dbd6bed7684c60135add09655f2d843e4a34327b120d0de5185f766a1879c7341979d271e490f5894c41a22d0c71c51f10635a2b4a5fcddf9b62668db2b1712b982931219a5d1829388ceca1fd22b08db50d177977a94f5d02e9d1634e3a59af978ea5d0c8fadddb49d896333086b19370ae8efe5ae19bf91e09096b2147adc66162c08447c7480a803db1dd72c8a2b1ca263aafac0587f04cb0f9639971ee465b1932d5d97082b4a7938e80d2e8821a95f87f398bc4954ad07a15e77c8cab881ebb3225618fd22b4b7ac0952d60f87802d399f7b151b155e764467c5ac41ea481b369870557afbe509df4aaeba71804a54f73e2826eb1195adbeef32ce2b17ae8c12a39b511348fd48216e4cb09fad658e8ec52ffd0d7bce2bc657dba3708968513be3bc27c2e19c42546c2b4b39d5656aa6232685cca8853bd8590b15b2bd91222dedc2627249b8c938a2a47843f93b7a7bc9c6cb633c183a887d26c3a66221d87563870a654ad044a56074f87c9af31a5ef5b7eab628993cb883b7ccd8099a9dcfe3791e3499d0aab692919a8e2001f4aa678aefda2aeba951120edc3a10868a549c4a5e50abe41d57ecbb862c83095e512ebe5203c614a5278ce0aa5253470eb276f9c053373ac78bbbb7a3ac2d2b7e6e3db67e994fdb23c9a4f70398803575d80a86eec710a5988be3b2197367602234f2f13f7d7a45818f817aa5acae6b30b931d0b32b56f37d41b37b1b979b6cb4582f9a9b09a8f36605ea8d314c3cd3788fe3610bc5b76970a0a1194231baab0b8aabed1210f31b6ce0346dd45318d6bcabddeb597ded2524b4bce5624a6987a9ee58412437deb8f0e24dee355d41b69767f24e8ccc98d9f8d0de7fff079b157500269457d8b6d0d7ab46e8016bce2290316d4eb7435aeca36f894ac42ec91fd040748975fc3e50070381cda8ad37b2a506c41d6c626da3ba6370e429e505715801fc16ef5430da81238cc0612115fbe3ab6dae5c2fb863ae186a955bb3896e3feea825038ff517cb6e3dc0227002335776a2aa3aff4143b641a0d1812eb5329910d2daef5dcbdba52ec57ac0fdd928f34f828a095ab7f37e698cbff2d7560de33441fe2a07c86e94cbb98c45c419872fd6be4897bdbe609f6f58b09cb8dc6a1d07faf87c11142dadd8665d5b2c89c5e193fb01580e060cfaa78efedf649d6dcdead404d67b139ad403e78b1079e8e59a4d79b9546d3526da6f3f0e8de2b2c0356c87ef4c088ac49040ac81e0887ffc4168bc5e573975092543c69221d6d128d8b367f30b6fc886c50c6a9efd71cffb4dce02d6fbcfa50788b9a7fa01a1e8b22e6ecd8f70988a982c278a449a9c16dde6cb88f67c2a34758ff198754cfc24304ae953486484c8f51c21c0276d555e272e1367c6699d609fce6e0fd85e428206edbf01827455eaeaa4c8407d1ba1b53f87255b312b8b41d93391ea5ba75407278a21fde49dcf7f6d1b0b5a3702561e54c06a2e124151429fea50835d2862ff97e55d9d3cd1d798d22a44666c591cee4242178ed9bf9cb6acb9919a7fc0c29cac0ad4953a7ed253878c8c12349b8ddfde170fcb87202d6e80dc977ef312abe6ad4dc9e804b2fd509b2cb4fc604acab63b5028dd83a4f361fb654169eeb39b237b76fd45ce7f5a54d1e969a1aaf53abd8dc4b6aeb170f894ed3b71e1dce9570969d9960f370eda78a5f9d6a7ed575368801a10bd5a4c196273690a97894c25a18bee0d5fd0df32fb0c10d6e9a9e10b2eb461b8281a8bbf617c54957c945636752e6792acddb297fd7793503ba88585f5370da1cc6df4e1f9955e25bc7a6211130d31734c4a855c65c30cb0624b7ccd5fead2e7d05a0446331d757590a5fa8bb44e43688f319236691e0e2820a5dd3aa6470e9807c82c132b4f13cb25f79b0e4f876324e26e378b686bdb8f1c6b7da9fb9ffb9d6e9e9526d5d1f1193c150bf18bc30268fde59ef89c035c9623b4b73c3316740c028fc2616df00a857589291724c3434b115994b9211fd3db9ec51b3d61151f71feadcc75574f797858811f92a87b7898bb752c848378f122fd0246c24ca3b7534f53943401530528d525c01a239dfc92000952d6de02c4158c8801cc11f2e49a5ba70a443c205fe7690b80b233f777c9ab237a54363678cf346a161621b2ec7a79a89d679f76214b5a4d5a6e3823a5db213d068f7a25cce86a570678fef9c8ca79b864b9d1e5b49535bf47a0fdaac4263034dedd4b4f4f45ad0e0b48b2d261ab2ee8df02d6378c0df07ef86f418406101a8c1e170dc01764483199404dd6bcbe561df989649c0db5dab3cf74d175b1f9720c6e0483e0dd4b403e6b1a464c2d307b3f36d1887653dff35c27a6d418741138e4575b43984470e1de96175976ead224d0e65b65daa17e4b6f97a7e96bf9b4ac7d70200ce3cb9bacf40eef60bf8b341feba29b15601070161fbe3d6f9a6d9f67f250f4df2e0801991fe0864573c6ca25a50cb4d233542df43013353798f02a68caf15f26259a01926e363e4ff8ae168b1c2c0f4171a86a9c1dc12f800b48eba17883060d895cc938b190b2fe524463257d4678f2e3206471b67cb804dd07289b48fb6fc5f2cc9e4f16ba66556f52fc30bbe440499fe4bbea033480671a750e78d180cc7a7997b7b67604fda64f25c27e1f6e17bc6be5d3deba52bc5d8f49f8f8eb7a6f4c615c600147711f5fb45d92538642912209667df14aca1f6889a4ac620d75afff96ae7475d096cdfdd2a08bd9650782aa57636a688cece59ebc9bcd406c6c5eb73159bdd9c9198337e5096843319455f20dfd07a0b8e58aa273187929bed43e9e71f63434dd5be153e396701f2a63bef4d9b38d8ac237154988cee813ca6e2dd4b60ef2e31f7d845a570afec8354058aeafade282a1f0deb9b891699bb7a0bf783294a56ce2e01dc3376e984f35bc845912b221fef8cbb450eae4446c8854247bb6f8acec73729ebae97762cf959d279015ea25a9cfc8ee5ddd38fe1fbb102a76b26f2926001966335384eeb7163910429bb4f20510e44d114c2a570f849ee83d7944402ae53351b62659c3b16d955c550106921f48f87eba23da8dc722538de0715f138c0c837cf1da34d39531004be78b949ef36e3fd851f3e2cb07e77c1542c1bbabac01cd3abc4b7af1eb39e5c0fab4f73471993dfaf8f9de7b64a1462846cf594d361bd32bd6dfa393b850906cb4f241f9905c842009c7f4cf647685a747394aa55c20d9908c245af3b90a15c40876245a527ab766e0440bb76c4", 0x7, r0, 0x4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002340)={&(0x7f0000000680)="1a18942a0a3eb5aaf257c5319ca58ac2a45761e8d103767c76312fa013925ea6ed4673ecdfea3c40c719cceef087d538e4f20a5cb924a665a3aa9e664fe9df839741c984519337c6bd8e89e7ba1205dc021bbf13c23c999b6499e6e1fc46668178289c0c550fee236efbd7791490c805a4a969a9df608b6e1cd13436742fca2d86f53ebf38c53b779e9f0beda754874f18d8c1ae8a1b10f4e483f8e336b33fd64fc0d8108d0fa362b7724a26d2f29be641d6d8b9a48f877c79bc6096e5bc011ae51fe627335c2f4f1fd133e0069d6cd05ca4fc456cc0a03dc1737d053042539b38f98fb9ce4f48b2ba81c4bd338ecaf2752aae2a", &(0x7f00000008c0)=""/244, &(0x7f00000009c0)="feac", &(0x7f0000001340)="4d020c216729c3197382a3a18096b0fd59c0f847b18efa3df17f90f0001490606127765f705b0803c75e33823b5e7e7a54a190cb2e46366fe493837a6630c53ec02fd67d45ad7fd9fc72c0060e98d368ee36c6da261de66f20a93511361d634b961f7513e94f09d2542173ca56a1c72682bcbe7502ee57bb6ec635b1f5372709b7829d145e160743ab47f564e832a31e9466eb6334f165cab004efcce97eb1ca2378fe4a0602cda647b57513208576f91694c2903563cf090b2d720e5cd90b53a608f37392f710b79702c0f53b3d0397d809ee8b15d56a6cc56810c825c1d6876f0d18aa775943a08ad9fb7ce5f4db574cd517eb7909374bbde82d4dff51eae7a4f45afe85e66e92d1f73e304dc5da4196444db33bc5435d0530a89562e384ec101e099674b33b076f11994bab225615b99872f08d994b93582dd195b199de3f6ac04fc480c8ec98a6a77ab850b96ced7b85e02635a422427f7b98424b0443c88207cbf1e564d39061776e66addba826f0ed815de4ecc58648865113dde9ff6e13c92fab54ed2b9783889224a27d0c5fedaa8cfacd83bd6de655e65bb4d11126b6d5306fb5c8292b883f8ed787fc848dcd3f37110c429c680be19b571067ecf7713e31cfe64451f2780704eb22eca210f850719c52f3837ed46936f76a6a07301ece47adc4db11e20a6573fe6f794926a048cfc735926a37840dd1deb39833b1a60dae277889ad9a022f33531ff1ecd1297acc13a3156dea0b8d57d41509c6f426b62b75e697f4937dd764889b00505549b51a4f03355379c8e38e9e7cee75f14eb3272bbedce2fd4ed9f18ec94063d1b4956e7ade91bcb7c5a8a527bd2f63baf088a7484ff9bd96c5231c19d9fc029d887b4f7c7fdfa2c410f2686f7b3e3c094d674cf1b9edf08ce47c088c725c635410a4955df18b5d0f2a0602f95567bbcd8ec427d1a74d5db9dfa65cf5f4873a005c7caf568d9b3749d5bd50c4f5eb471aad425320601514f18a7eabf2f8d78e6fb330b433be3dffc0b9adb8fa224af65a939564cfb35a362ec6cacd1f290d899b9709327b9f2aa6c2e6fa325d7d20446d9e9e92d5c90239b2edf920f26429914a46689ee38b4792b8c7743e8f2d2b4593d91ded5f0bb3cd04edcc83931219a19ffd1542414b5103bafb8d9f8a497288bf63625f91a946d5de53c45f73935745c1c7659ea034f628a0e57c27f0dfb42807c50f94f4604c238eae03d8f2ed9771fafe3d3be20d9357c3c76db87ffc5ee812bb9212c330bbe611d5a93e1391d153f5a1c057d98b048149b9b512b926519bce145f681526de2403b6a5bf52b3c15437536fea5d76ca90dc3578e9a7f9384fbd08276d94bb602c99c14324fe9f9e1238072ea0380d269b5d77db9289dbf846a139e3db0820e9d483484cd15a772faae4041f90325371c71d83ac2681f13a343f71c778e743c8552e0175d2b95a01ae12acd6af9f17666b44938951315a5121038977388427dc3a0bbfcb60607bd03c3de34bb940538e32a26e24c3edfe1a49bf6d45c2071c5c330e1f6f8c0f049399280832299523137e5aeb24a3130cc708ebcf758d1729e1902bd018cf47e2cc8551819223370acd362e1b05d8eefcb38c98b02ab321790126d49a2bf6547f4db331c7d6e115f88434aff56447ba0106c3a2a9c8ec16b66d01cf23ab43dbfa8923506383da46a6e395e9ab5ccc7c82177b44bffab73a56346055005291c3a3fcd6d83857a4ed735d253c8c29b3a03cdca7609f541f5925feb380d97f6804e63f4c5645ce41cd947ef9ff894a4626c133fc39a82bf1377fb02ba7c4dfa11a092b3b90bc201e06837b122aec5239c7a5a21b5b5400f710b52c57f6c23f7b4908e8c0d4333daaf6c1279df4b878c582ab722ad0d3471b6d9a8abdf86c3b44ecfb87b6e1c89fc06231c21f1a0952cd0930480038c79b08f3985cc66b530c17073c9e114e546d58185fbc9a579f0ea7fd72275f5e6e6ff22eead7d224fa9f98eb079d538aadf36cfe737dbb226239b640c7070c169427678a5cce62877355d7da1147c88a084769210cdf0de64b4a9b238f2291e95ff7783a93c97143ed844eb914f3117a82fbdcc4cdadf727c3b9d18e228c0f926a4a1bd5a95a6ffbe5ca3d447190d14920f62eaa5ea6476d35eb398f56810d61b6aee368abb881afa4489df9e8156b4fa893886702108d601fad879b5358e943b82ab5da66af15d36e1050d965b7da238af53804365189ced154c957414e8af9b80f46cbdf96aae5408ad23db155562fef63796ede62a741a592bd35272fc727a94187042b86f1208fdb0c280ade5aac0e773a1f5903a159f5a43d72585da19bc68cf280f599c75a22006f23cdaf6543a928af46bd1d7a4048be8d9705515cc1cf70fa885ba68cdb92ee48bad361301549bdbd8b9eda284eac1668e3a21a3297ff965f93039c0addff1b917def1473137c832e8208c9f88d49c6724b6da08bc2a5351c56c6f4829153b90e50dbd6bed7684c60135add09655f2d843e4a34327b120d0de5185f766a1879c7341979d271e490f5894c41a22d0c71c51f10635a2b4a5fcddf9b62668db2b1712b982931219a5d1829388ceca1fd22b08db50d177977a94f5d02e9d1634e3a59af978ea5d0c8fadddb49d896333086b19370ae8efe5ae19bf91e09096b2147adc66162c08447c7480a803db1dd72c8a2b1ca263aafac0587f04cb0f9639971ee465b1932d5d97082b4a7938e80d2e8821a95f87f398bc4954ad07a15e77c8cab881ebb3225618fd22b4b7ac0952d60f87802d399f7b151b155e764467c5ac41ea481b369870557afbe509df4aaeba71804a54f73e2826eb1195adbeef32ce2b17ae8c12a39b511348fd48216e4cb09fad658e8ec52ffd0d7bce2bc657dba3708968513be3bc27c2e19c42546c2b4b39d5656aa6232685cca8853bd8590b15b2bd91222dedc2627249b8c938a2a47843f93b7a7bc9c6cb633c183a887d26c3a66221d87563870a654ad044a56074f87c9af31a5ef5b7eab628993cb883b7ccd8099a9dcfe3791e3499d0aab692919a8e2001f4aa678aefda2aeba951120edc3a10868a549c4a5e50abe41d57ecbb862c83095e512ebe5203c614a5278ce0aa5253470eb276f9c053373ac78bbbb7a3ac2d2b7e6e3db67e994fdb23c9a4f70398803575d80a86eec710a5988be3b2197367602234f2f13f7d7a45818f817aa5acae6b30b931d0b32b56f37d41b37b1b979b6cb4582f9a9b09a8f36605ea8d314c3cd3788fe3610bc5b76970a0a1194231baab0b8aabed1210f31b6ce0346dd45318d6bcabddeb597ded2524b4bce5624a6987a9ee58412437deb8f0e24dee355d41b69767f24e8ccc98d9f8d0de7fff079b157500269457d8b6d0d7ab46e8016bce2290316d4eb7435aeca36f894ac42ec91fd040748975fc3e50070381cda8ad37b2a506c41d6c626da3ba6370e429e505715801fc16ef5430da81238cc0612115fbe3ab6dae5c2fb863ae186a955bb3896e3feea825038ff517cb6e3dc0227002335776a2aa3aff4143b641a0d1812eb5329910d2daef5dcbdba52ec57ac0fdd928f34f828a095ab7f37e698cbff2d7560de33441fe2a07c86e94cbb98c45c419872fd6be4897bdbe609f6f58b09cb8dc6a1d07faf87c11142dadd8665d5b2c89c5e193fb01580e060cfaa78efedf649d6dcdead404d67b139ad403e78b1079e8e59a4d79b9546d3526da6f3f0e8de2b2c0356c87ef4c088ac49040ac81e0887ffc4168bc5e573975092543c69221d6d128d8b367f30b6fc886c50c6a9efd71cffb4dce02d6fbcfa50788b9a7fa01a1e8b22e6ecd8f70988a982c278a449a9c16dde6cb88f67c2a34758ff198754cfc24304ae953486484c8f51c21c0276d555e272e1367c6699d609fce6e0fd85e428206edbf01827455eaeaa4c8407d1ba1b53f87255b312b8b41d93391ea5ba75407278a21fde49dcf7f6d1b0b5a3702561e54c06a2e124151429fea50835d2862ff97e55d9d3cd1d798d22a44666c591cee4242178ed9bf9cb6acb9919a7fc0c29cac0ad4953a7ed253878c8c12349b8ddfde170fcb87202d6e80dc977ef312abe6ad4dc9e804b2fd509b2cb4fc604acab63b5028dd83a4f361fb654169eeb39b237b76fd45ce7f5a54d1e969a1aaf53abd8dc4b6aeb170f894ed3b71e1dce9570969d9960f370eda78a5f9d6a7ed575368801a10bd5a4c196273690a97894c25a18bee0d5fd0df32fb0c10d6e9a9e10b2eb461b8281a8bbf617c54957c945636752e6792acddb297fd7793503ba88585f5370da1cc6df4e1f9955e25bc7a6211130d31734c4a855c65c30cb0624b7ccd5fead2e7d05a0446331d757590a5fa8bb44e43688f319236691e0e2820a5dd3aa6470e9807c82c132b4f13cb25f79b0e4f876324e26e378b686bdb8f1c6b7da9fb9ffb9d6e9e9526d5d1f1193c150bf18bc30268fde59ef89c035c9623b4b73c3316740c028fc2616df00a857589291724c3434b115994b9211fd3db9ec51b3d61151f71feadcc75574f797858811f92a87b7898bb752c848378f122fd0246c24ca3b7534f53943401530528d525c01a239dfc92000952d6de02c4158c8801cc11f2e49a5ba70a443c205fe7690b80b233f777c9ab237a54363678cf346a161621b2ec7a79a89d679f76214b5a4d5a6e3823a5db213d068f7a25cce86a570678fef9c8ca79b864b9d1e5b49535bf47a0fdaac4263034dedd4b4f4f45ad0e0b48b2d261ab2ee8df02d6378c0df07ef86f418406101a8c1e170dc01764483199404dd6bcbe561df989649c0db5dab3cf74d175b1f9720c6e0483e0dd4b403e6b1a464c2d307b3f36d1887653dff35c27a6d418741138e4575b43984470e1de96175976ead224d0e65b65daa17e4b6f97a7e96bf9b4ac7d70200ce3cb9bacf40eef60bf8b341feba29b15601070161fbe3d6f9a6d9f67f250f4df2e0801991fe0864573c6ca25a50cb4d233542df43013353798f02a68caf15f26259a01926e363e4ff8ae168b1c2c0f4171a86a9c1dc12f800b48eba17883060d895cc938b190b2fe524463257d4678f2e3206471b67cb804dd07289b48fb6fc5f2cc9e4f16ba66556f52fc30bbe440499fe4bbea033480671a750e78d180cc7a7997b7b67604fda64f25c27e1f6e17bc6be5d3deba52bc5d8f49f8f8eb7a6f4c615c600147711f5fb45d92538642912209667df14aca1f6889a4ac620d75afff96ae7475d096cdfdd2a08bd9650782aa57636a688cece59ebc9bcd406c6c5eb73159bdd9c9198337e5096843319455f20dfd07a0b8e58aa273187929bed43e9e71f63434dd5be153e396701f2a63bef4d9b38d8ac237154988cee813ca6e2dd4b60ef2e31f7d845a570afec8354058aeafade282a1f0deb9b891699bb7a0bf783294a56ce2e01dc3376e984f35bc845912b221fef8cbb450eae4446c8854247bb6f8acec73729ebae97762cf959d279015ea25a9cfc8ee5ddd38fe1fbb102a76b26f2926001966335384eeb7163910429bb4f20510e44d114c2a570f849ee83d7944402ae53351b62659c3b16d955c550106921f48f87eba23da8dc722538de0715f138c0c837cf1da34d39531004be78b949ef36e3fd851f3e2cb07e77c1542c1bbabac01cd3abc4b7af1eb39e5c0fab4f73471993dfaf8f9de7b64a1462846cf594d361bd32bd6dfa393b850906cb4f241f9905c842009c7f4cf647685a747394aa55c20d9908c245af3b90a15c40876245a527ab766e0440bb76c4", 0x7, r0, 0x4}, 0x38) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r4, 0x12) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) 1.074191094s ago: executing program 3 (id=3188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x9, 0x0, 0x54) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5c0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b6000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 477.892907ms ago: executing program 2 (id=3189): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r0 = socket$kcm(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000)=r3, 0x20000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYBLOB="61a070c85d49ff8991d6bb1f419eacd8f396f2dc09c0c41fec0f0990049fdfa62858f2865cddac564e9006d62fe5bc659c0c0c557ac9533d1119affa27dac35e03a3665376f46dd670e98b6eb345489bfa58608648150833963f46c34f513acf83abacd478add77294a5e474e154cdb5025ad2e6fe4d165e14d0b503fb6e0ada42d188d052cbf2a88fe4d1e56b2f0dca8e8cecea28c71b218f23f0d868d834dec55ca1e2d6c6386c7d97932ba8ec95d2fd3c32facdd6dc143f27999e1f", @ANYBLOB="367747514a9368ca2fce170db71a3a9857e89c4b765fffb3d44ac0c03f061ec9f09c97ada9c6c99ec7066bf7cbf4924ec40f3d27747e09813752a97b77be73951ff628ea6bc1c3331f4c8235f4263933cc66c2bca914cd3fd5fb4645d07680aa22f75b38"], 0xfe33) 275.141121ms ago: executing program 0 (id=3190): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x3, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0xc4}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x808, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) 227.784354ms ago: executing program 2 (id=3191): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f0000000040), 0x4) close(r4) close(r3) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffff0db703000008000019b7040000020000808500000033000000850000002300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059feffff7f00002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f00000001c0)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 149.74981ms ago: executing program 3 (id=3192): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x4, 0x30521, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000c, 0x2, @perf_config_ext={0x9, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x8000fe, 0x0, 0x4000201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{}]}, @struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc}]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r5, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xec, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socket$kcm(0x29, 0x7, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r10, @ANYBLOB="3e0002"], 0x9a) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x11, 0x1, 0xe, 0x1, 0x40000, r6, 0x0, '\x00', r8, r11, 0x4, 0x1, 0x2}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) 0s ago: executing program 0 (id=3193): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002840)={r1, &(0x7f0000001780)="239b8e90d9e1e43fa2d0a6ca6b61981cded0a8bdd422ffb463904eceb6a849ad285e84eb6a97bd62a7142a850d034ee3f16574f32ced3a616e0b2fd57c9397d5ed3dfb5fa39c6e1e39f007c129c0ce75a1fde4b77052703db5d96d633da9ca7d5f75f0d078e4dece2a2e0b961082f62c1351c8b21363f77cc60baef00920bb3cdab8543bec741b785b1638b384edf3996f3b80451017b527ba258575d94dabc2d5c2004583340e614979e156deb1a01ea27443f9514932bf68441cac757ae9a5907375437043750749ed93d3689c219c2ee869625eb3ec4a2ffe212c5af7cb5f7fb16e7338642b354f5b92d73f6e08659f637c1b06cf8bcb854d7f47ccfdc514eaa6cde66dc1d5d82eff5aec7380686a51793e74d3868f06ed8e58b04234f9d98a713e61d7cd069e74eae4b2975eea1a815fbb87a3726c6bd82fb28d6e612c159e33cd000a6da73ff4170edfd1ecc5338adb29f12530339d34ae3f8fd4feb01acbb73e1ec3800f0a75b51a3463af7e9b8664094fea1f6ee72f0946bdc9a41439be96cbb0b835e75da88eb50799fddf20bcaadd1e913e1b0dffdbc28b4c9a90326e47a08f4a4816fbd066036f62e4a3891e24eeb410087f9b370497c257277262c9a2443e2a22be4e57e7d85b31f324cf6ae1dad2d9cff7771884870a691efc21d92e45c8e16ecba375d1dffcf9ffe535a899c6a3ad7599ad36b9a1ac9223ce9fcbeb46848392bfca34b22ba8403084e0dc9c74a595042d076e916ddebf42f940bb4cf3e1ce0d22059858b8b45c494ab44796c7c480c7542acff6cef7683f3c37931f8e9b4293c6f0081c8b6ba2a56efde70da5a5b3efcd0a5cd4087e3f7981e9cf186b02d30a70d66eda79abf16d1b8feb73751340c235739ac384d1ddac5da7fa0a5074e6a88215fc5a8f54c11787059e328af79df3975569d863329a30d3cd5eb70980ba005d54fd069cec4c1b10322f52ff10e2ba85cbd43dca40182c6103fe0ef46799efd7aac9429ba7454e5386b3925458a1229e845906d8e27cec30ff87bf1dc646f547528d50370bf85db76c5c597456df979685c8fb47b94aa4c1bbf8a9de49d8bcd7e226170f805e334271140ee598cdb652270f505ea12329d5155452dfe5e90b0c76f40265d57be0de282824af5194bb585104b98513ac27a9c965b5090028abfda48661cd0e6570a4dc9b103a956bce5e4c3e8763586968b959a3b5f3136688c8fc09b7c17cffa8e4d3630e8d3f8962115e65c68bbbe0ea46a50129d54ce14661aa5e7e761c2fc7c7df06b592f3e653135b44afe8feb5ed2d26386c33946444328b6c78b7351e60645da888a92fb0ee9e92033d9671eafd35dbea6e70c290f1c4fb81ef712df097c8e867075edf8707d606b41000644b5987121d7f420d8d887f47120e0d71df5c0decaa65ddae056102472e4fdc84a6899026b4fce9be9ef69266eccb6ba99dee2edfdfe75eef5157570ee7bdda67a8d1950c13584d0fba8b04aa0ee7ac909548f940f62f24b9b4e08224fb7b0dcff37702b8566eec90c0605ece23e3b67f13915d52622b59b775c158335d280e6032341070c8e194be282a9992fe6a30a388ed4896f5185a8917948f368e779680bef8e89f1f56ef5b4cab68a9b61d7be7052a9e8e3bc9ee5514367130a02d76df5b6cff5afe9550d587ad441c77d01a8aa324ea1533de11e684324f8f6075f6f6aea04a3376148a7c3921c40c6c7ce888df058c204f6082b184c5655fbf06c04fd94d3ec2f2b77b44870a1cd3604364c17cd35f2645a777df0024dee81f7541a8a1b2296ba4b3e598ae63b6ff4dcb3b299fb6bcc079b30dcb7824c267a3b60b83d6fff12ceed44ef8de2802215083651fb6fc57499e68b0ef31580f5db0e7c9287cc54781ff13f66baefb3310753287052dabe45f12cac4cc2756e626ca6a9c0124d44c55fc417431734da47f4b6da86c9374a6247fad7961757a52a8e35d0b54cd5e029de8d4fd4394230b8438f44c11609d2010c3cfa88417a5fc6d633c31270faff4044445c9160111daf7916e3bdc5000489a6b392bbca4e6f982a4da2884f25d7d8eca27f1786f4c2e594722f1f59e9273ad42035313df4b7f2ad3f838c97326aa8d4a25ac63f7e670c3de3622f017a02c447785ab62989b65618249421aaeaafa9792783cdc2433b04a61d7ab5f090610d2f44de396874cf5b93ce43d2626d592a72fe9759dbd3d1f435615e3fb1a9ee759344cb3d5ffb52fb63251e7b1793e0e75c9e1763e78b1a0226cbe58a9848ab1f2e6ddc2fccdb042615f52b72e8ebdd2995bfb8963c2babcd3f135143aef52b42c3c5a31c689cb5b8c3d25d5513d2981ba7dccbc33ec792561908feda19cc69ef9cd0d8db1231648060045c340896355777eb05f68e57573205119bb44b86d01572f9dfc3ed85a453820a0ce6e116071107bfff853e63e79f8edd47eb1713bf372a725b0090cff83bdd0dda2b0ee87329304315fa0bf47f436474edf3ef411b5e656387ac199691711f054157d5c16fb2bdac85a3310dcb7dc319dd3e63e99bf2e75a45fc10f73c311bf57ce59ff533987e77eca1db74c596236256c1c2bb2f6e207b19bfa63229cdf4a1664bd495961da10b0913be01c898ffa97126485d864531c40c07762569ac098ad66fa5caef556a5cb76715f83b0902d9b7b57e54b7d4b4d69c6018784216089fdb8ea3ae07ea3008b5310ee8becac0fa2448b4d95731f222ebcee8cfcd7d54859b76a66e4479e0dc3783cad5726be39884bf1ec6dc26742437c87becb9b3d8aee1adf1905c2fe99a4cf708b7dda90a6c90c62e3b785f0bef5606dcd39e65c55f8294c0f74d9dc47a569452c1784bbb11cef034d0f97f562acb67645bbb457727876efede816f92b1f4f7cd37461a97f2c31667ea5b066640584fe190a5e5bb75922c643bb288a55671cce0d3ecc0b33b14d6dec73017b8a3a92a96836762c5a6fefdf42d6404107b41592e1d4e67a156c077b5e759dd85fbc1229d6457d0cd93cb1c10e7f70f6cc591de5ab13a1fb97430d6f006c81e9a38961fdbe553ded756ac2a22c78f2ac35c206833fa7c878756df8d3892239b2f0b46152c51d411efdf753bec95c0a3c00986d349f2d1e4493a0033cf418d62e7cd0bf46ecf0b88610f0b6daaebe071e62cba63f427b9e8d729e280932cd31ff59ca6a583be70917b57b1a4a8c647103bd7b294de7f29a77ec439ac512ae6ea6e9d4578d5b751d8401745d7866a38616a6c2149becb9db06712ebd2f5cef404597275e28d718ac81494e9b42c7efb52c665c586b3c93024c30350b9302372ecfaf067028cd91fb9ce9d5613cf41e0605adeadb51f15d6dbe7b3aade3f1f7bc96798275affcf8e5d6cf2bea63925aa078a1baef23068d21aeaaac22ef5bceade69b2c1a2c596e246053669c0cc33af368686da6194a17b87413e286ee55235af95ed0bd6aa6db86128fd92b412ceafc4a6281ef416e4fad3bb6105bd9962eb0277dc10fd08b39edb6f2fa9b5feaea6e7cf9f2411fca9d81e6228c479b252c09548729cd2ec364db288a2b8963eab071328bacda58e3279319b9fa0768dfff8394327969b649bec8e2d1a4ad00aa5a4d7b69621104e48233570d4d6649e6280ac95a224ad36788f666f48c0ed6341fedd9e96698eaa5b1a9534a55b17ef94ce07321c6c926a423f0584459821a08db147575184b9c40514dacb9d8d8ae4b8c1469b26461200da6b4e037f12a9acc07f1e8b6c9ff48235da164030092680842c0057d25b9092d65e9d808cc7366ab8458034db7fa286a257a5812a0d3897fc4b67ea3fb170f4fc04413e302c2c9c4956462ae73629e3e8c569c7e965589b7cac35c0675abc686eb5b867767d26a5806257c819aa7bae32c3585f9ff699bcc6cd412055bf00075078af750e52e741318d93e178ead0cd58bdc509683ff1285246361e6ecfea076244691100db8d0c4ea3b842c9fae09e368025c83d4e0a1188088ca4b29a8fdf59d094447c4271408ed476d9401628c4e061569041c9540a4651f46a353bfd3d2afc95fce649f3de26b509def4b14b0193e9bdc9cde1f95c97781fd4acca5a7125dd64e2117503f51d2a3ba2bc6004dd9e9ac260ef42186890c4d881015f1d661d0deeab39e435958be6e2661d690f69c30b1190e1360759ed9540709bde0c8b966c2632d73ddc7a886c963697e4d086cbc7ec04e91e5b4c0812cdde423225e96236326c869fae7e358436416f698b253a89a05339a572d3806edc0a89bc70029088d88eb960c2cd5c0d43c7fac743b182d7c9dd9d7d384976e11370ed4f854e85c9e6c2ac1c52cfc826ec6e2d62d6def2460fca16ce64fff7512b9463c6f3942d01ef5561e33cb8c86fd82bc8d48729b77832cd08f5f4d411142ce97622f25f02a2fa0958e8080f11598aaf27eaca2fb65c8825ad5cc7f3d66ff821758015e6fe2216c8049dfc9ef17f2eb5f5bd0892a45b4e49c876037685c9bfddd769a68d5d04fa0b21dca55a676e537efa80097880b232940641c3da5383290ed2bfd351a8c88f673912e6850b24ec920545a201a06127c3b06222854bcef7bc8ca9f5baf219cb5b2782cb1bcb169e3a7e46c46bc388866265ad20229a45dc18acfffc6173d81a3d1a60003b1900a3a78a3c43226a4609f29be1f8bf18b3e773897bbc4fb5d4060a09ba09719fcd0bfaa717337e03ff91d02804a7cf7bfde753b8e9cb4594aaad86474d63f5624f29353edf75265785618f4c0b9ff37609802dead8dbd7a266ed311ff0373651a50595c446e05b1cd7bc52495a005a454767e96f11e23c742f7d99013a6916a79ea2c21c561e4c6723ea44061ebf84a78e13e140859c6263489fca8c39c6824afca30fe4003e96feb3a54bd485e6ebbc5bc888aaf7bd247516bf28edfa2fea8f6d621db01dc1673b56824d59226f8dfd1af9895c5fb6c7ef15534938c4674faf7771b42c81878445b47abaad3ffb5bd093a7af898bbce169b223b056ab42bc098cbbf971bc59cf6c8578fb7311b9edc059813f7586c7d98e8078e120686c712bbefa8f685a028817a1d8ef1854f611946dab5e3cdd0095b4465c286fc672ed53a23f56bd440f05cf450dd72bca10f4643e49a2f1aee215bf20041ae00ed8fbf0c9c18af52e8a6ebf6c447abe4839be277525f2d559857615039a587e9c19c88131a5955c45e0d47283f99457762a5067c32316991ffa4b5e46794c2742d777e47fb9dcc5c7bf43da9605a8b0810dd7a667e61922d65f4139e8cd0e23dc84f84536faf063752773810d4c5c75b5fdf64a778ee79dc5f4bf99521e96eb45c160fd2bd0ff3664f26b233d5f1bbf4c3aed096f45592dd31ee4993fbf9c97428a52ca3402a22f93044da3ac462a021a75a63f228b8ea9550df287fbfca21e69a6c502bcfb86852798784ab644394352eda840236b77395e14f491e30cf071d370b138329819a50138d42e3ab8c1c59ff91d232fbadc56b9a582ddd97218473bf53a0507d5c3ef34c14c5bb922900ce8cde1bfe83d5b06b17e4032c5764e34b7c9d97b337fdd1a08d79965b6d3c25d166b95b678856e8f178b758f100a30d1cb7b9caf80f851e60e3641c0bfd5b547c7464d7174ad94b5a1af51aab7d725a8f7b76f7cac0daa6013317c18e64b06582436da3fad206a0255a19b92fe965d86eecc9594fd399b4dbc126be3739614a5aaca68ef011d1184d2c765a3c2f7db5575de85e9bc6f39595c6a0da84e8b94127e3e46be92bcbd99ecb7795452c534242204f503a1404", &(0x7f0000002780)=""/172}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8}, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ftover after parsing attributes in process `syz.0.1508'. [ 412.282402][T11555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1508'. [ 412.293900][T11555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1508'. [ 412.309790][T11555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1508'. [ 412.597873][T11555] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1508'. [ 412.637017][T11555] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1508'. [ 412.677781][T11555] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1508'. [ 413.329874][T11588] netlink: 'syz.2.1516': attribute type 39 has an invalid length. [ 413.600983][T11597] netlink: 'syz.3.1519': attribute type 10 has an invalid length. [ 413.946254][T11607] netlink: 'syz.2.1523': attribute type 10 has an invalid length. [ 413.964175][T11607] hsr0: left promiscuous mode [ 413.971964][T11607] hsr0: left allmulticast mode [ 413.983140][T11607] hsr_slave_0: left allmulticast mode [ 413.990940][T11607] hsr_slave_1: left allmulticast mode [ 414.006026][T11612] __nla_validate_parse: 3 callbacks suppressed [ 414.006041][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1523'. [ 414.149121][T11607] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 414.170626][T11612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1523'. [ 415.372700][T11640] netlink: 'syz.3.1534': attribute type 6 has an invalid length. [ 415.392766][T11640] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1534'. [ 415.422451][T11643] netlink: 'syz.1.1532': attribute type 39 has an invalid length. [ 415.679104][T11655] netlink: 'syz.0.1537': attribute type 39 has an invalid length. [ 416.014976][T11660] netlink: 'syz.3.1536': attribute type 10 has an invalid length. [ 416.078164][T11660] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 416.117318][T11660] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 416.135649][T11660] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 416.236024][T11660] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 416.729307][T11684] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1545'. [ 416.904711][T11690] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1546'. [ 417.035189][T11699] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 417.077068][T11699] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1549'. [ 417.398267][T11704] netlink: 'syz.0.1551': attribute type 39 has an invalid length. [ 418.841557][T11726] IPv6: Can't replace route, no match found [ 418.870194][T11726] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 418.981757][T11730] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1559'. [ 419.212266][T11735] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1561'. [ 419.367455][T11748] netlink: 'syz.0.1563': attribute type 21 has an invalid length. [ 419.375609][T11748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1563'. [ 419.536254][T11750] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1564'. [ 420.565246][T11765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1567'. [ 420.637133][T11765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1567'. [ 420.864703][T11766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1567'. [ 421.010956][T11765] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1567'. [ 422.561719][T11766] netlink: 3827 bytes leftover after parsing attributes in process `syz.1.1567'. [ 422.681630][T11766] netlink: 3827 bytes leftover after parsing attributes in process `syz.1.1567'. [ 422.782647][T11768] netlink: 3827 bytes leftover after parsing attributes in process `syz.1.1567'. [ 424.127632][T11788] netlink: 'syz.2.1578': attribute type 21 has an invalid length. [ 424.751314][T11808] delete_channel: no stack [ 425.206183][ T5774] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 426.904892][T11847] netlink: 'syz.0.1586': attribute type 10 has an invalid length. [ 427.073096][T11846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.129952][T11853] netlink: 'syz.1.1584': attribute type 21 has an invalid length. [ 427.217167][T11853] __nla_validate_parse: 1 callbacks suppressed [ 427.217187][T11853] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1584'. [ 427.303629][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 427.821319][T11873] netlink: 'syz.3.1595': attribute type 11 has an invalid length. [ 427.866955][T11873] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1595'. [ 428.522468][T11876] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1596'. [ 429.835265][T11882] netlink: 'syz.1.1598': attribute type 29 has an invalid length. [ 429.903778][T11882] netlink: 'syz.1.1598': attribute type 29 has an invalid length. [ 429.952256][T11885] netlink: 'syz.1.1598': attribute type 29 has an invalid length. [ 429.979906][T11883] netlink: 'syz.1.1598': attribute type 29 has an invalid length. [ 429.999551][T11882] netlink: 'syz.1.1598': attribute type 29 has an invalid length. [ 433.833026][T11912] netlink: 'syz.0.1606': attribute type 1 has an invalid length. [ 433.847020][T11912] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1606'. [ 434.874901][T11927] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 434.905788][T11927] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1611'. [ 435.144242][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1614'. [ 435.238891][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1614'. [ 435.475141][T11943] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1612'. [ 435.551956][T11943] netlink: 'syz.1.1612': attribute type 10 has an invalid length. [ 436.343516][T11943] .`: (slave team0): Enslaving as an active interface with an up link [ 436.580572][T11962] netlink: 'syz.0.1619': attribute type 11 has an invalid length. [ 436.593329][T11959] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 436.604299][T11962] netlink: 181992 bytes leftover after parsing attributes in process `syz.0.1619'. [ 436.645378][T11959] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 436.664063][T11959] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1618'. [ 437.648300][T11991] netlink: 'syz.2.1627': attribute type 21 has an invalid length. [ 437.851806][T11995] netlink: 'syz.1.1626': attribute type 21 has an invalid length. [ 440.786705][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.793220][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.220210][T12050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1640'. [ 441.243619][T12050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1640'. [ 441.267241][T12050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1640'. [ 441.281905][T12050] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1640'. [ 441.660400][T12050] netlink: 'syz.3.1640': attribute type 29 has an invalid length. [ 441.752069][T12050] netlink: 'syz.3.1640': attribute type 29 has an invalid length. [ 443.212560][T12079] netlink: 'syz.1.1647': attribute type 3 has an invalid length. [ 443.246988][T12079] netlink: 'syz.1.1647': attribute type 5 has an invalid length. [ 444.455473][T12100] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1653'. [ 444.459937][T12098] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1652'. [ 444.527060][T12098] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 444.535610][T12098] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 444.914506][T12105] netlink: 'syz.2.1654': attribute type 21 has an invalid length. [ 444.966991][T12105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1654'. [ 445.989283][T12121] netlink: 'syz.1.1659': attribute type 10 has an invalid length. [ 446.562314][T12133] netlink: 'syz.2.1660': attribute type 2 has an invalid length. [ 446.574187][T12133] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.1660'. [ 447.015428][T12141] netlink: 'syz.0.1663': attribute type 21 has an invalid length. [ 447.084883][T12141] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1663'. [ 447.143566][T12141] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1663'. [ 447.297681][T12147] netlink: 'syz.3.1664': attribute type 21 has an invalid length. [ 447.309545][T12147] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 447.351082][T12146] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 447.369480][T12146] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1665'. [ 447.412306][T12146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.447071][T12146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.747194][T12165] netlink: 'syz.1.1669': attribute type 21 has an invalid length. [ 447.772888][T12165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1669'. [ 449.814461][T12202] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1679'. [ 450.224074][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 450.251490][T12182] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1673'. [ 450.264624][T12209] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1681'. [ 450.370488][T12182] bridge_slave_1: default FDB implementation only supports local addresses [ 450.880806][T12221] netlink: 'syz.3.1684': attribute type 21 has an invalid length. [ 450.988304][T12221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1684'. [ 451.619969][T12229] netlink: 'syz.1.1686': attribute type 3 has an invalid length. [ 451.648406][T12229] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1686'. [ 451.721827][T12231] netlink: 'syz.0.1685': attribute type 21 has an invalid length. [ 451.733280][T12231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1685'. [ 451.892018][T12239] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1689'. [ 451.914993][T12239] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 453.854424][T12251] syzkaller0: entered promiscuous mode [ 453.891496][T12251] syzkaller0: entered allmulticast mode [ 454.146180][T12257] netlink: 'syz.2.1693': attribute type 21 has an invalid length. [ 454.549662][T12257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1693'. [ 459.040513][T12277] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 459.051872][T12277] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 459.063615][T12278] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 459.121988][T12282] GPL: port 1(veth0_to_team) entered blocking state [ 459.149961][T12282] GPL: port 1(veth0_to_team) entered disabled state [ 459.181797][T12282] veth0_to_team: entered allmulticast mode [ 459.193336][T12282] veth0_to_team: entered promiscuous mode [ 460.064622][T12298] netlink: 'syz.2.1703': attribute type 21 has an invalid length. [ 460.080414][T12298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1703'. [ 460.099820][T12297] netlink: 'syz.0.1704': attribute type 21 has an invalid length. [ 460.108440][T12297] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1704'. [ 460.227780][T12297] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1704'. [ 460.279776][T12297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 460.484645][T12305] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1705'. [ 460.699721][T12308] netlink: 'syz.0.1706': attribute type 6 has an invalid length. [ 460.740727][T12308] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1706'. [ 460.942152][T12315] netlink: 'syz.1.1707': attribute type 21 has an invalid length. [ 460.981093][T12315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1707'. [ 461.016068][T12317] netlink: 'syz.2.1709': attribute type 10 has an invalid length. [ 461.046381][T12318] netlink: 'syz.2.1709': attribute type 10 has an invalid length. [ 461.369281][T12326] veth1: mtu less than device minimum [ 461.470933][T12326] netlink: 'syz.3.1711': attribute type 10 has an invalid length. [ 461.529353][T12326] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1711'. [ 462.147093][T12335] netlink: 'syz.2.1713': attribute type 21 has an invalid length. [ 462.155157][T12335] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1713'. [ 462.506881][T12344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1715'. [ 462.976954][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 463.695476][T12372] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1722'. [ 463.902775][T12372] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 463.927037][T12372] CPU: 0 PID: 12372 Comm: syz.2.1722 Not tainted syzkaller #0 [ 463.934646][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.945060][T12372] Call Trace: [ 463.948432][T12372] [ 463.951544][T12372] dump_stack_lvl+0x18c/0x250 [ 463.956451][T12372] ? show_regs_print_info+0x20/0x20 [ 463.961941][T12372] ? load_image+0x420/0x420 [ 463.966664][T12372] sysfs_warn_dup+0x8e/0xa0 [ 463.971343][T12372] sysfs_do_create_link_sd+0xc0/0x110 [ 463.977366][T12372] device_add_class_symlinks+0x1cf/0x240 [ 463.983144][T12372] device_add+0x507/0xc20 [ 463.987634][T12372] wiphy_register+0x1dad/0x2ae0 [ 463.992740][T12372] ? cfg80211_event_work+0x40/0x40 [ 463.997941][T12372] ? minstrel_ht_alloc+0x88a/0x990 [ 464.003667][T12372] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 464.009968][T12372] ieee80211_register_hw+0x3464/0x4250 [ 464.015975][T12372] ? ieee80211_tasklet_handler+0x20/0x20 [ 464.021695][T12372] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 464.027915][T12372] ? __debug_object_init+0xec/0x450 [ 464.033360][T12372] ? __asan_memset+0x22/0x40 [ 464.038253][T12372] ? __hrtimer_init+0x186/0x270 [ 464.043344][T12372] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 464.049411][T12372] ? mac80211_hwsim_free+0x220/0x220 [ 464.054864][T12372] ? rcu_is_watching+0x15/0xb0 [ 464.059835][T12372] ? kstrndup+0xbd/0x140 [ 464.064265][T12372] hwsim_new_radio_nl+0xdc9/0x1a90 [ 464.069625][T12372] ? __nla_validate+0x50/0x50 [ 464.074513][T12372] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 464.081480][T12372] ? __nla_parse+0x40/0x50 [ 464.086381][T12372] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 464.092868][T12372] genl_family_rcv_msg_doit+0x211/0x310 [ 464.098699][T12372] ? end_current_label_crit_section+0x170/0x170 [ 464.105291][T12372] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 464.111644][T12372] ? bpf_lsm_capable+0x9/0x10 [ 464.116522][T12372] ? security_capable+0x89/0xb0 [ 464.121648][T12372] genl_rcv_msg+0x619/0x7a0 [ 464.126321][T12372] ? genl_bind+0x360/0x360 [ 464.130857][T12372] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 464.137453][T12372] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 464.144244][T12372] ? perf_trace_lock+0xfc/0x3b0 [ 464.149280][T12372] netlink_rcv_skb+0x241/0x4d0 [ 464.154301][T12372] ? genl_bind+0x360/0x360 [ 464.159376][T12372] ? netlink_ack+0x1180/0x1180 [ 464.164447][T12372] ? __lock_acquire+0x7d40/0x7d40 [ 464.169654][T12372] ? down_read+0x1ac/0x2e0 [ 464.174302][T12372] genl_rcv+0x28/0x40 [ 464.178598][T12372] netlink_unicast+0x751/0x8d0 [ 464.183669][T12372] netlink_sendmsg+0x8d0/0xbf0 [ 464.188788][T12372] ? netlink_getsockopt+0x590/0x590 [ 464.194208][T12372] ? aa_sock_msg_perm+0x94/0x150 [ 464.199353][T12372] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 464.204993][T12372] ? security_socket_sendmsg+0x80/0xa0 [ 464.210717][T12372] ? netlink_getsockopt+0x590/0x590 [ 464.216137][T12372] ____sys_sendmsg+0x5ba/0x960 [ 464.221060][T12372] ? __asan_memset+0x22/0x40 [ 464.225773][T12372] ? __sys_sendmsg_sock+0x30/0x30 [ 464.230895][T12372] ? __import_iovec+0x5f2/0x850 [ 464.235921][T12372] ? import_iovec+0x73/0xa0 [ 464.240572][T12372] ___sys_sendmsg+0x2a6/0x360 [ 464.245399][T12372] ? __sys_sendmsg+0x2a0/0x2a0 [ 464.250669][T12372] __se_sys_sendmsg+0x1c2/0x2b0 [ 464.255649][T12372] ? __x64_sys_sendmsg+0x80/0x80 [ 464.260818][T12372] ? lockdep_hardirqs_on+0x98/0x150 [ 464.266236][T12372] do_syscall_64+0x55/0xa0 [ 464.270734][T12372] ? clear_bhb_loop+0x40/0x90 [ 464.275509][T12372] ? clear_bhb_loop+0x40/0x90 [ 464.280485][T12372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.286508][T12372] RIP: 0033:0x7f5f8fd9c819 [ 464.291131][T12372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.311020][T12372] RSP: 002b:00007f5f8dff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.319643][T12372] RAX: ffffffffffffffda RBX: 00007f5f90015fa0 RCX: 00007f5f8fd9c819 [ 464.327796][T12372] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 464.336027][T12372] RBP: 00007f5f8fe32c91 R08: 0000000000000000 R09: 0000000000000000 [ 464.344102][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.352249][T12372] R13: 00007f5f90016038 R14: 00007f5f90015fa0 R15: 00007ffd4e721c88 [ 464.360531][T12372] [ 464.562591][T12384] netlink: 'syz.3.1724': attribute type 21 has an invalid length. [ 464.630086][T12384] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 466.761647][T12428] __nla_validate_parse: 4 callbacks suppressed [ 466.761670][T12428] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1736'. [ 466.778545][T12420] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1733'. [ 466.908420][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1737'. [ 467.195034][T12440] netlink: 'syz.1.1739': attribute type 21 has an invalid length. [ 467.203376][T12440] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1739'. [ 467.215666][T12440] netlink: 'syz.1.1739': attribute type 4 has an invalid length. [ 467.223813][T12440] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1739'. [ 467.341418][T12445] netlink: 'syz.2.1742': attribute type 3 has an invalid length. [ 467.376957][T12445] netlink: 'syz.2.1742': attribute type 5 has an invalid length. [ 467.694438][T12456] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1747'. [ 467.703946][T12455] netlink: 'syz.1.1746': attribute type 4 has an invalid length. [ 467.703968][T12455] netlink: 'syz.1.1746': attribute type 16 has an invalid length. [ 467.703980][T12455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1746'. [ 467.750083][T12456] netlink: 'syz.3.1747': attribute type 21 has an invalid length. [ 467.758229][T12458] netlink: 'syz.1.1746': attribute type 4 has an invalid length. [ 467.758278][T12458] netlink: 'syz.1.1746': attribute type 16 has an invalid length. [ 467.758293][T12458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1746'. [ 467.825517][T12456] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 467.836527][T12456] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1747'. [ 468.187440][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 469.049621][T12507] macvlan1: entered promiscuous mode [ 469.055474][T12507] macvlan1: entered allmulticast mode [ 469.061988][T12507] veth1_vlan: entered allmulticast mode [ 469.192092][ T5774] Bluetooth: hci1: ACL packet too small [ 472.137669][T12594] __nla_validate_parse: 9 callbacks suppressed [ 472.137686][T12594] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.1781'. [ 472.465601][ T5774] Bluetooth: hci0: ISO packet for unknown connection handle 16 [ 473.699697][T12610] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1784'. [ 474.238416][T12623] validate_nla: 5 callbacks suppressed [ 474.238586][T12623] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 474.693976][T12627] sctp: [Deprecated]: syz.0.1789 (pid 12627) Use of int in maxseg socket option. [ 474.693976][T12627] Use struct sctp_assoc_value instead [ 475.454283][T12639] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1793'. [ 475.827862][T12660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 476.553449][T12660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 477.470865][T12691] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1803'. [ 477.492518][T12680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1800'. [ 477.552115][T12679] delete_channel: no stack [ 477.639299][T12693] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1804'. [ 478.674682][T12726] netlink: 'syz.1.1813': attribute type 3 has an invalid length. [ 478.697579][T12726] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1813'. [ 478.721170][T12726] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 478.749453][T12727] netlink: 'syz.1.1813': attribute type 3 has an invalid length. [ 478.763575][T12727] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1813'. [ 478.773891][T12727] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 479.150261][T12731] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 479.234147][T12731] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.353809][T12731] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.366554][T12731] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.376111][T12731] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.422422][T12731] geneve0: entered promiscuous mode [ 479.738519][T12731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.760824][T12731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.777009][T12731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.788311][T12731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.813257][T12731] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 480.600599][T12776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'. [ 480.641838][T12776] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1825'. [ 484.142995][T12830] netlink: 'syz.0.1839': attribute type 21 has an invalid length. [ 484.169379][T12830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1839'. [ 484.973536][T12841] netlink: 'syz.3.1845': attribute type 2 has an invalid length. [ 485.026922][T12841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1845'. [ 485.117564][T12841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1845'. [ 485.172972][T12841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1845'. [ 485.199163][T12846] netlink: set zone limit has 8 unknown bytes [ 485.389044][T12846] macvlan1: entered promiscuous mode [ 487.382547][T12884] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1860'. [ 488.496513][T12917] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1867'. [ 488.526402][T12917] veth0_to_bond: left promiscuous mode [ 489.384874][T12937] netlink: 'syz.2.1872': attribute type 10 has an invalid length. [ 489.676564][T12952] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1875'. [ 490.762005][T12971] netlink: 'syz.0.1881': attribute type 2 has an invalid length. [ 490.820718][T12971] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1881'. [ 491.602206][T12979] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1884'. [ 491.723948][T12984] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 491.762788][T12984] syzkaller1: Linktype set failed because interface is up [ 492.645067][T13005] netlink: 'syz.1.1889': attribute type 21 has an invalid length. [ 492.703122][T13005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1889'. [ 492.763545][T13004] netlink: 'syz.3.1890': attribute type 21 has an invalid length. [ 492.814525][T13004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1890'. [ 495.198716][T13056] netlink: 'syz.1.1902': attribute type 1 has an invalid length. [ 495.218783][T13056] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1902'. [ 495.599611][T13068] netlink: 'syz.2.1907': attribute type 21 has an invalid length. [ 495.622527][T13068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1907'. [ 495.799360][T13076] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1908'. [ 495.821604][T13076] openvswitch: netlink: Flow key attr not present in new flow. [ 496.153972][T13080] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 496.356154][T13080] veth0_macvtap: left promiscuous mode [ 497.889949][T13103] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1912'. [ 497.916649][T13103] veth0_to_bond: entered promiscuous mode [ 498.922991][T13134] netlink: 'syz.1.1924': attribute type 10 has an invalid length. [ 498.956442][T13134] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1924'. [ 499.007924][T13134] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 499.308478][T13140] netlink: 'syz.2.1925': attribute type 10 has an invalid length. [ 499.358207][T13140] hsr_slave_0: left promiscuous mode [ 499.428932][T13140] hsr_slave_1: left promiscuous mode [ 500.808619][T13157] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1929'. [ 500.835380][T13157] veth0_to_bond: entered promiscuous mode [ 501.863130][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.870158][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.046000][T13183] netlink: 'syz.2.1935': attribute type 10 has an invalid length. [ 502.713093][T13196] netlink: 'syz.3.1938': attribute type 21 has an invalid length. [ 503.014269][T13220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1942'. [ 503.047108][T13220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1942'. [ 503.063886][T13220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1942'. [ 503.881404][T13236] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 503.961604][T13236] veth0_macvtap: left promiscuous mode [ 505.591145][T13285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1958'. [ 506.314316][ T5774] Bluetooth: hci0: unexpected event 0x3d length: 15 > 14 [ 508.471578][T13339] syz.3.1972[13339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.506414][T13339] syz.3.1972[13339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.592545][T13346] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1975'. [ 509.342646][T13368] syzkaller0: entered promiscuous mode [ 509.397110][T13368] syzkaller0: entered allmulticast mode [ 509.482994][T13378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1983'. [ 509.499525][T13378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1983'. [ 509.699487][T13378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1983'. [ 509.715330][T13385] netlink: 'syz.2.1985': attribute type 21 has an invalid length. [ 509.723513][T13385] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1985'. [ 509.733533][T13386] netlink: 'syz.2.1985': attribute type 21 has an invalid length. [ 509.742877][T13386] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1985'. [ 509.755206][T13380] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1983'. [ 512.366169][T13406] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.1990'. [ 512.754428][T13422] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1995'. [ 513.745917][T13451] @0Ù: renamed from bond_slave_1 (while UP) [ 513.802808][T13451] netlink: 'syz.3.2001': attribute type 21 has an invalid length. [ 513.841860][T13451] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2001'. [ 514.210962][T13475] netlink: 'syz.2.2007': attribute type 21 has an invalid length. [ 514.229840][T13475] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2007'. [ 514.819654][T13492] netlink: 'syz.3.2011': attribute type 21 has an invalid length. [ 514.849359][T13492] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2011'. [ 515.142200][T13502] syzkaller0: entered promiscuous mode [ 515.160533][T13502] syzkaller0: entered allmulticast mode [ 515.289608][T13511] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2016'. [ 515.303769][T13511] netlink: 'syz.0.2016': attribute type 5 has an invalid length. [ 515.680743][T13520] netlink: 'syz.0.2019': attribute type 3 has an invalid length. [ 515.703086][T13520] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2019'. [ 518.439326][T13544] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2025'. [ 518.670066][T13545] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 518.699322][T13545] netlink: 'syz.0.2022': attribute type 3 has an invalid length. [ 518.742322][T13545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2022'. [ 518.836629][T13550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2026'. [ 518.846121][T13550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2026'. [ 519.508831][T13564] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2030'. [ 520.710514][T13574] delete_channel: no stack [ 520.808413][T13554] syzkaller0: entered promiscuous mode [ 520.821764][T13554] syzkaller0: entered allmulticast mode [ 523.732549][T13610] netlink: 'syz.0.2041': attribute type 21 has an invalid length. [ 524.316794][T13613] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 524.358038][T13613] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 524.397260][T13613] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.2043'. [ 524.472269][T13613] openvswitch: netlink: Message has 4 unknown bytes. [ 526.514177][T13685] netlink: 'syz.3.2053': attribute type 21 has an invalid length. [ 526.524434][T13685] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2053'. [ 527.027899][T13682] netlink: 'syz.0.2051': attribute type 10 has an invalid length. [ 527.184444][T13682] team0: Device ipvlan1 failed to register rx_handler [ 527.634009][T13697] netlink: 'syz.1.2055': attribute type 10 has an invalid length. [ 528.073925][T13707] netlink: 'syz.2.2058': attribute type 9 has an invalid length. [ 528.107698][T13707] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2058'. [ 528.778670][T13723] netlink: 'syz.2.2065': attribute type 21 has an invalid length. [ 528.871681][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2065'. [ 529.240935][T13720] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 529.269942][T13720] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 529.286389][T13720] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2063'. [ 529.305207][T13720] openvswitch: netlink: Message has 4 unknown bytes. [ 530.045296][T13737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.075368][T13737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.124806][T13737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.158347][T13737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.305104][T13757] delete_channel: no stack [ 530.314464][T13757] delete_channel: no stack [ 531.200127][T13784] netlink: 'syz.1.2076': attribute type 10 has an invalid length. [ 531.218177][T13784] netlink: 'syz.1.2076': attribute type 10 has an invalid length. [ 531.231833][T13784] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2076'. [ 531.242066][T13784] openvswitch: netlink: Message has 4 unknown bytes. [ 531.307963][T13792] netlink: 'syz.0.2077': attribute type 21 has an invalid length. [ 531.334983][T13792] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2077'. [ 531.638652][T13797] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2081'. [ 531.679197][T13797] openvswitch: netlink: Key type 29 is not supported [ 532.304263][T13810] pim6reg1: entered promiscuous mode [ 532.310387][T13810] pim6reg1: entered allmulticast mode [ 532.983558][T13828] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2094'. [ 533.564197][T13846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2099'. [ 533.585767][T13846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2099'. [ 533.628044][T13841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2099'. [ 533.656073][T13841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2099'. [ 533.807506][T13849] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2100'. [ 533.847365][T13851] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2100'. [ 534.179710][T13861] netlink: 'syz.2.2101': attribute type 39 has an invalid length. [ 534.257829][T13863] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 534.436722][T13867] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2105'. [ 534.512268][T13865] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.2105'. [ 535.168162][T13880] -1: renamed from syzkaller0 [ 535.532416][T13898] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 535.542201][T13898] netlink: 'syz.2.2114': attribute type 2 has an invalid length. [ 535.557075][T13898] netlink: 'syz.2.2114': attribute type 3 has an invalid length. [ 535.574940][T13898] netlink: 'syz.2.2114': attribute type 4 has an invalid length. [ 535.850774][T13905] syzkaller0: entered promiscuous mode [ 535.857631][T13905] syzkaller0: entered allmulticast mode [ 536.180566][T13920] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 536.228099][T13923] netlink: 'syz.3.2122': attribute type 29 has an invalid length. [ 536.526323][T13931] netlink: 'syz.3.2122': attribute type 29 has an invalid length. [ 539.040904][T13920] netlink: 'syz.2.2120': attribute type 1 has an invalid length. [ 539.049522][T13923] netlink: 'syz.3.2122': attribute type 29 has an invalid length. [ 539.680607][T13974] validate_nla: 2 callbacks suppressed [ 539.680627][T13974] netlink: 'syz.3.2133': attribute type 9 has an invalid length. [ 539.694452][T13974] __nla_validate_parse: 1 callbacks suppressed [ 539.694463][T13974] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2133'. [ 539.842748][T13975] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2132'. [ 539.867319][T13975] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 539.879275][T13975] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 540.133816][T13979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2135'. [ 540.177053][T13979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2135'. [ 542.844779][T14006] netlink: 'syz.3.2138': attribute type 10 has an invalid length. [ 542.948219][T14006] team0: Device wg1 is of different type [ 545.798664][T14013] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 545.813369][T14016] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 545.841247][T14016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2143'. [ 545.996713][T14021] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.2144'. [ 546.319248][T14032] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 547.624928][T14064] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2157'. [ 548.797107][T14067] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 548.836442][T14067] syzkaller0: entered promiscuous mode [ 548.842581][T14067] syzkaller0: entered allmulticast mode [ 548.861214][T14072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.877007][T14074] netlink: 'syz.0.2161': attribute type 1 has an invalid length. [ 548.894997][T14074] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2161'. [ 551.665225][T14088] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2163'. [ 551.678074][T14088] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2163'. [ 551.688990][T14088] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2163'. [ 551.977040][T14104] netlink: 'syz.2.2167': attribute type 21 has an invalid length. [ 551.986361][T14104] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2167'. [ 552.881007][T14109] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2168'. [ 553.109819][T14136] netlink: 'syz.3.2174': attribute type 3 has an invalid length. [ 553.122884][T14136] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2174'. [ 553.170918][T14137] netlink: 'syz.0.2173': attribute type 4 has an invalid length. [ 553.189739][T14137] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2173'. [ 554.325691][T14159] netlink: 'syz.1.2180': attribute type 13 has an invalid length. [ 554.342563][T14159] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2180'. [ 554.403375][T14163] netlink: 'syz.0.2182': attribute type 2 has an invalid length. [ 554.465665][T14163] netlink: 'syz.0.2182': attribute type 8 has an invalid length. [ 554.487126][T14163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2182'. [ 555.040243][T14173] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2183'. [ 556.247823][T14201] netlink: 'syz.2.2189': attribute type 27 has an invalid length. [ 556.307454][T14201] netlink: 'syz.2.2189': attribute type 3 has an invalid length. [ 559.082458][T14247] netlink: 'syz.3.2194': attribute type 13 has an invalid length. [ 559.107034][T14247] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2194'. [ 560.335688][T14278] netlink: 'syz.0.2202': attribute type 21 has an invalid length. [ 560.353595][T14278] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2202'. [ 560.638378][T14289] netlink: 'syz.0.2204': attribute type 4 has an invalid length. [ 560.670291][T14289] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2204'. [ 560.844551][T14289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2204'. [ 561.063754][T14289] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 561.444528][T14302] netlink: 'syz.0.2209': attribute type 13 has an invalid length. [ 561.470071][T14302] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2209'. [ 561.483994][T14306] netlink: 'syz.3.2208': attribute type 29 has an invalid length. [ 561.502773][T14306] netlink: 'syz.3.2208': attribute type 29 has an invalid length. [ 562.086027][T14297] netlink: 'syz.3.2208': attribute type 29 has an invalid length. [ 562.103831][T14312] netlink: 'syz.1.2211': attribute type 9 has an invalid length. [ 562.112900][T14312] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2211'. [ 562.365109][T14319] netlink: 'syz.3.2213': attribute type 21 has an invalid length. [ 562.376635][T14319] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2213'. [ 563.301051][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.307697][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.352768][T14330] netlink: 'syz.0.2216': attribute type 21 has an invalid length. [ 563.791494][T14350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2220'. [ 563.952288][T14354] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2223'. [ 564.621216][T14362] validate_nla: 2 callbacks suppressed [ 564.621236][T14362] netlink: 'syz.0.2224': attribute type 2 has an invalid length. [ 564.646221][T14361] netlink: 'syz.2.2225': attribute type 10 has an invalid length. [ 564.662430][T14362] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.2224'. [ 565.910960][T14381] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2230'. [ 568.155781][T14383] netlink: 'syz.2.2231': attribute type 10 has an invalid length. [ 568.267678][T14383] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 568.281872][T14385] netlink: 'syz.2.2231': attribute type 4 has an invalid length. [ 568.297002][T14390] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2232'. [ 569.641468][T14410] netlink: 'syz.0.2237': attribute type 21 has an invalid length. [ 569.693832][T14410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2237'. [ 571.084022][T14453] netlink: 'syz.2.2248': attribute type 5 has an invalid length. [ 571.092932][T14453] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2248'. [ 571.523350][T14461] netlink: 'syz.2.2249': attribute type 21 has an invalid length. [ 571.543688][T14461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2249'. [ 573.241720][T14500] netlink: 'syz.2.2260': attribute type 10 has an invalid length. [ 573.305661][T14500] team0 (unregistering): Port device team_slave_0 removed [ 573.341581][T14500] team0 (unregistering): Port device team_slave_1 removed [ 573.354077][T14500] team0 (unregistering): Port device wlan1 removed [ 573.387657][T14500] team0 (unregistering): Port device bond0 removed [ 573.434611][T14500] team0 (unregistering): Port device veth1_macvtap removed [ 573.468239][T14503] netlink: 'syz.3.2261': attribute type 21 has an invalid length. [ 573.481619][T14503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2261'. [ 576.054783][T14538] netlink: 'syz.1.2273': attribute type 10 has an invalid length. [ 576.665743][T14549] netlink: 'syz.1.2275': attribute type 21 has an invalid length. [ 576.683126][T14549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2275'. [ 577.605038][T14566] netlink: 171688 bytes leftover after parsing attributes in process `syz.3.2280'. [ 577.870574][T14573] netlink: 'syz.3.2282': attribute type 4 has an invalid length. [ 577.887259][T14573] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2282'. [ 578.028600][T14573] .`: renamed from bond0 (while UP) [ 578.047803][T14573] bond_slave_0: left promiscuous mode [ 578.065097][T14573] @0Ù: left promiscuous mode [ 578.070462][T14573] batadv_slave_0: left promiscuous mode [ 578.076901][T14573] batadv0: left promiscuous mode [ 578.089241][T14576] netlink: 'syz.0.2283': attribute type 10 has an invalid length. [ 578.289892][T14576] team0 (unregistering): Port device team_slave_0 removed [ 578.381689][T14576] team0 (unregistering): Port device team_slave_1 removed [ 578.397178][T14576] team0 (unregistering): Port device geneve1 removed [ 579.162840][T14609] netlink: 'syz.2.2294': attribute type 10 has an invalid length. [ 579.254476][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'. [ 579.550619][T14609] netlink: 'syz.2.2294': attribute type 39 has an invalid length. [ 579.733250][T14621] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2298'. [ 579.934546][T14626] IPv6: Can't replace route, no match found [ 580.410694][T14642] netlink: 'syz.1.2302': attribute type 9 has an invalid length. [ 580.448852][T14642] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2302'. [ 581.737780][T14658] netlink: 'syz.3.2308': attribute type 21 has an invalid length. [ 581.780367][T14658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2308'. [ 581.968603][T14664] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 581.978972][T14664] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 581.988308][T14664] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 581.997406][T14664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 582.007542][T14664] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 582.015210][T14664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.188549][T14667] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 582.641393][T14667] netlink: 'syz.1.2310': attribute type 39 has an invalid length. [ 583.133383][ T7221] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.199398][T14680] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2311'. [ 583.216076][T14683] netlink: 'syz.1.2312': attribute type 29 has an invalid length. [ 583.239090][T14683] netlink: 'syz.1.2312': attribute type 29 has an invalid length. [ 583.305122][T14674] : renamed from veth0_to_bond (while UP) [ 583.583481][ T7221] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.639277][T14663] chnl_net:caif_netlink_parms(): no params data found [ 583.769457][ T7221] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.899308][ T7221] batman_adv: batadv0: Removing interface: netdevsim0 [ 583.910689][ T7221] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.928299][T14663] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.935584][T14663] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.944176][T14663] bridge_slave_0: entered allmulticast mode [ 583.952458][T14663] bridge_slave_0: entered promiscuous mode [ 583.963770][T14663] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.971555][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.983385][T14663] bridge_slave_1: entered allmulticast mode [ 583.991589][T14663] bridge_slave_1: entered promiscuous mode [ 584.055976][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.085129][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.097466][T14664] Bluetooth: hci4: command tx timeout [ 584.353706][T14663] team0: Port device team_slave_0 added [ 584.396621][T14663] team0: Port device team_slave_1 added [ 584.515251][T14709] netlink: 'syz.0.2317': attribute type 1 has an invalid length. [ 584.538331][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.545644][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.547963][T14709] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2317'. [ 584.594566][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.615530][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.632881][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.681691][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.777994][ T7221] tipc: Left network mode [ 584.789525][T14663] hsr_slave_0: entered promiscuous mode [ 584.796626][T14663] hsr_slave_1: entered promiscuous mode [ 584.835922][T14663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.844350][T14663] Cannot create hsr debugfs directory [ 585.541535][T14721] netlink: 'syz.3.2320': attribute type 21 has an invalid length. [ 585.604237][T14721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2320'. [ 586.177197][T14664] Bluetooth: hci4: command tx timeout [ 586.627777][T14732] netlink: 'syz.0.2321': attribute type 10 has an invalid length. [ 586.780444][T14747] netlink: 'syz.3.2324': attribute type 9 has an invalid length. [ 586.866959][T14747] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2324'. [ 586.993214][T14744] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 587.019627][T14744] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2324'. [ 587.068229][T14737] netlink: 'syz.0.2321': attribute type 39 has an invalid length. [ 588.259847][T14664] Bluetooth: hci4: command tx timeout [ 588.595620][T14761] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2322'. [ 588.773599][T14761] : renamed from veth0_to_bond (while UP) [ 588.903865][T14763] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 588.933151][T14763] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2327'. [ 589.588381][T14663] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.636310][T14663] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.743057][T14663] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.928997][T14663] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.338146][T14664] Bluetooth: hci4: command tx timeout [ 591.756032][T14820] delete_channel: no stack [ 591.778219][T14820] delete_channel: no stack [ 592.645157][ T7221] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 592.857645][ T7221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.996676][ T7221] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 593.253886][ T7221] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 593.306504][ T7221] bond0 (unregistering): Released all slaves [ 593.382710][T14831] netlink: 'syz.3.2339': attribute type 4 has an invalid length. [ 593.395365][T14831] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2339'. [ 593.429942][T14831] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 593.507724][T14663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.603926][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.654507][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.661760][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.734757][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.742039][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.970383][T14852] pim6reg1: entered promiscuous mode [ 593.996417][T14852] pim6reg1: entered allmulticast mode [ 594.642358][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.735745][T14663] veth0_vlan: entered promiscuous mode [ 594.745201][T14860] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2343'. [ 594.751933][T14663] veth1_vlan: entered promiscuous mode [ 594.835211][T14861] : renamed from veth0_to_bond (while UP) [ 595.074381][T14663] veth0_macvtap: entered promiscuous mode [ 595.086248][T14663] veth1_macvtap: entered promiscuous mode [ 595.114796][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.135330][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 595.152181][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.164399][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.182960][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.198262][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.224455][T14663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.243883][T14663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.256852][T14663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.268924][T14663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.567154][ T7258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.622758][ T7258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.746706][ T7221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.764610][ T7221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.387249][T14879] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2303'. [ 597.780714][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.791063][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.804607][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.818651][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.827979][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 597.838928][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 598.056825][T14888] netlink: 'syz.0.2352': attribute type 10 has an invalid length. [ 598.783655][ T7221] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.927297][T14889] chnl_net:caif_netlink_parms(): no params data found [ 599.948088][ T5774] Bluetooth: hci3: command tx timeout [ 600.030202][ T7221] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.827778][T14910] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2356'. [ 601.841902][T14912] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2356'. [ 602.017073][ T5774] Bluetooth: hci3: command tx timeout [ 602.085699][T14918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.206581][ T7221] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.389489][ T7221] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.641958][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.650138][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.658308][T14889] bridge_slave_0: entered allmulticast mode [ 602.688523][T14889] bridge_slave_0: entered promiscuous mode [ 602.701236][T14889] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.710816][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.719126][T14889] bridge_slave_1: entered allmulticast mode [ 602.731507][T14889] bridge_slave_1: entered promiscuous mode [ 602.819608][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.872403][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.210682][T14889] team0: Port device team_slave_0 added [ 603.252338][T14889] team0: Port device team_slave_1 added [ 603.473071][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.533303][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.635644][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.098198][ T5774] Bluetooth: hci3: command tx timeout [ 604.467297][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.474420][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.507369][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.544218][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 604.570722][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 604.601429][T14964] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2367'. [ 604.619722][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 604.633549][T14964] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2367'. [ 605.153734][T14889] hsr_slave_0: entered promiscuous mode [ 605.209278][T14889] hsr_slave_1: entered promiscuous mode [ 605.260084][T14889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.300504][T14889] Cannot create hsr debugfs directory [ 606.187802][ T5774] Bluetooth: hci3: command tx timeout [ 606.542349][T15005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2383'. [ 606.584415][T15005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2383'. [ 606.611216][T15009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2383'. [ 606.921409][T15005] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2383'. [ 607.155792][T15007] netlink: 'syz.2.2376': attribute type 10 has an invalid length. [ 607.536223][T15007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.577732][T15007] team0: Port device bond0 added [ 608.334486][T14889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 608.362114][T14889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 608.388105][T15039] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2389'. [ 608.457491][ T7221] hsr_slave_0: left promiscuous mode [ 608.499184][ T7221] hsr_slave_1: left promiscuous mode [ 608.542424][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.577073][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.683890][ T7221] veth1_macvtap: left promiscuous mode [ 609.182362][ T7221] .` (unregistering): (slave geneve0): Releasing backup interface [ 609.605677][ T7221] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 609.672570][ T7221] team0 (unregistering): Port device team_slave_1 removed [ 609.734913][ T7221] team0 (unregistering): Port device C removed [ 609.793242][ T7221] .` (unregistering): (slave c@0Ù): Releasing backup interface [ 609.845092][ T7221] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.178967][ T7221] .` (unregistering): (slave batadv0): Releasing backup interface [ 610.262303][ T7221] team0 (unregistering): Port device dummy0 removed [ 610.293380][ T7221] .` (unregistering): (slave team0): Releasing backup interface [ 610.334364][ T7221] .` (unregistering): Released all slaves [ 610.381395][T14889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 610.395381][T15050] netlink: 'syz.1.2384': attribute type 10 has an invalid length. [ 610.406608][T15050] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2384'. [ 610.557482][T14889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 610.900405][T15066] netlink: 'syz.1.2386': attribute type 8 has an invalid length. [ 610.967297][T15066] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2386'. [ 611.082693][T14889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.104026][T15063] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2387'. [ 611.130452][T15063] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 611.172041][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.338864][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.346581][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.413635][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.420924][ T7234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.556970][T15065] netlink: 'syz.0.2388': attribute type 10 has an invalid length. [ 611.609252][T15067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2388'. [ 611.763541][T15067] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2388'. [ 611.957161][T15065] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2388'. [ 612.761529][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.973625][T14889] veth0_vlan: entered promiscuous mode [ 613.079090][T14889] veth1_vlan: entered promiscuous mode [ 613.297974][T14889] veth0_macvtap: entered promiscuous mode [ 613.333487][T14889] veth1_macvtap: entered promiscuous mode [ 613.406690][T15106] netlink: 'syz.1.2400': attribute type 10 has an invalid length. [ 613.433857][T15106] hsr0: left promiscuous mode [ 613.523937][T15106] team0: Port device hsr0 added [ 613.547811][T15114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2400'. [ 613.592490][T15114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2400'. [ 613.724347][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.760570][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.796958][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.834507][T15103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2400'. [ 614.075414][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 614.126965][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.157165][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.187404][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.208925][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.298771][T14889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.356802][T14889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.365945][T14889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.426802][T14889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.758317][ T7221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.777321][ T7221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.913245][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.959118][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.462170][T14664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 616.477108][T14664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 616.487206][T14664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 616.496155][T14664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 616.506835][T14664] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 616.516022][T14664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 617.923520][T15168] chnl_net:caif_netlink_parms(): no params data found [ 618.066683][T15182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2405'. [ 618.114623][T15180] netlink: 'syz.2.2405': attribute type 10 has an invalid length. [ 618.364786][T15180] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 618.391658][T15182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2405'. [ 618.431723][T15184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2405'. [ 618.577779][T14664] Bluetooth: hci2: command tx timeout [ 618.961060][T15168] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.996017][T15168] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.015490][T15168] bridge_slave_0: entered allmulticast mode [ 619.048597][T15168] bridge_slave_0: entered promiscuous mode [ 619.089225][T15168] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.127794][T15168] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.135327][T15168] bridge_slave_1: entered allmulticast mode [ 619.184671][T15168] bridge_slave_1: entered promiscuous mode [ 619.306611][T15168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.340224][T15168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.491798][T15168] team0: Port device team_slave_0 added [ 619.536004][T15168] team0: Port device team_slave_1 added [ 619.615983][T15168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.635717][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.723971][T15191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.800841][T15168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.848811][T15196] netlink: 'syz.2.2408': attribute type 29 has an invalid length. [ 620.286351][ T7252] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.383492][T15168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.414913][T15168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.557551][T15168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.632950][T15196] netlink: 'syz.2.2408': attribute type 29 has an invalid length. [ 620.657246][T14664] Bluetooth: hci2: command tx timeout [ 620.771799][ T7252] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.157500][ T7252] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.278733][T15168] hsr_slave_0: entered promiscuous mode [ 621.370245][T15168] hsr_slave_1: entered promiscuous mode [ 621.412707][T15168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.465856][T15168] Cannot create hsr debugfs directory [ 621.593242][ T7252] batman_adv: batadv0: Removing interface: netdevsim0 [ 621.658463][ T7252] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.737796][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2414'. [ 621.757047][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 621.776664][T15232] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2414'. [ 621.800177][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 621.813945][T15232] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2414'. [ 622.459913][T15249] netlink: 'syz.3.2419': attribute type 10 has an invalid length. [ 622.541593][T15249] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 622.573466][T15250] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2420'. [ 622.740569][T14664] Bluetooth: hci2: command tx timeout [ 622.870808][ T7252] tipc: Left network mode [ 623.191501][T15264] netlink: 'syz.3.2423': attribute type 2 has an invalid length. [ 623.205578][T15264] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 623.219418][T15264] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2423'. [ 624.527568][T15289] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2425'. [ 624.760843][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.769124][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.817132][T14664] Bluetooth: hci2: command tx timeout [ 625.904642][T15302] syzkaller0: entered promiscuous mode [ 625.931108][T15302] syzkaller0: entered allmulticast mode [ 628.994410][T15168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 629.017975][T15168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 629.070067][T15338] sit0: entered promiscuous mode [ 629.079454][T15338] sit0: entered allmulticast mode [ 629.187319][T15168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 630.009717][T15168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 630.126496][T15354] netlink: 'syz.0.2441': attribute type 21 has an invalid length. [ 630.142950][T15354] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2441'. [ 631.406039][T15168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.711994][T15168] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.756623][T15395] IPv6: pim6reg1: Disabled Multicast RS [ 632.993178][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.000643][ T7258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.096558][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.103823][ T7258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.464535][T15426] netlink: 'syz.3.2452': attribute type 21 has an invalid length. [ 633.507217][T15426] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2452'. [ 633.710991][T15168] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 633.777635][T15168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.379359][ T7252] vlan0: left allmulticast mode [ 634.403796][ T7252] veth0_vlan: left allmulticast mode [ 634.415433][ T7252] vlan0: left promiscuous mode [ 634.453392][ T7252] À: port 1(vlan0) entered disabled state [ 635.243673][ T7252] hsr_slave_0: left promiscuous mode [ 635.306355][ T7252] hsr_slave_1: left promiscuous mode [ 635.313398][ T7252] batman_adv: batadv0: Interface deactivated: €Â0 [ 635.343146][ T7252] batman_adv: batadv0: Removing interface: €Â0 [ 635.421883][ T7252] veth1_vlan: left promiscuous mode [ 635.431398][ T7252] veth0_vlan: left promiscuous mode [ 636.012465][T15454] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2459'. [ 636.188529][ T7252] team0 (unregistering): Port device geneve1 removed [ 636.239977][T15459] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2461'. [ 636.500436][ T7252] team0 (unregistering): Port device hsr0 removed [ 636.682993][ T7252] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 636.746619][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 636.854317][ T7252] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.283443][ T7252] .` (unregistering): (slave team0): Releasing backup interface [ 637.326492][ T7252] .` (unregistering): Released all slaves [ 638.139455][T15483] netlink: 'syz.0.2465': attribute type 21 has an invalid length. [ 638.159808][T15483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2465'. [ 638.345750][T15168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.384702][T15482] netlink: 'syz.2.2463': attribute type 39 has an invalid length. [ 638.788033][T15168] veth0_vlan: entered promiscuous mode [ 638.895601][T15168] veth1_vlan: entered promiscuous mode [ 639.049716][T15168] veth0_macvtap: entered promiscuous mode [ 639.093746][T15168] veth1_macvtap: entered promiscuous mode [ 639.145756][T15168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.172199][T15168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.194680][T15168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.215229][T15168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.228254][T15168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.283467][T15168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.295294][T15168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.306109][T15168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.318914][T15168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.330804][T15168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.355736][T15168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.377532][T15168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.386320][T15168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.428248][T15168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.654951][ T7229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.769740][ T7229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.965311][T15514] netlink: 'syz.2.2470': attribute type 10 has an invalid length. [ 640.249580][T15514] team0 (unregistering): Port device team_slave_0 removed [ 640.445367][T15514] team0 (unregistering): Port device team_slave_1 removed [ 640.488183][T15514] team0 (unregistering): Port device bond0 removed [ 640.534374][ T7258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.561013][ T7258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.582261][T15534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2403'. [ 641.631823][T15534] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2403'. [ 641.686263][T15537] netlink: 'syz.1.2403': attribute type 4 has an invalid length. [ 641.717391][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2403'. [ 641.857809][T15533] netlink: 'syz.2.2474': attribute type 21 has an invalid length. [ 641.948038][T15533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2474'. [ 642.077532][T15525] netlink: 'syz.0.2473': attribute type 1 has an invalid length. [ 642.085761][T15525] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2473'. [ 642.786924][T15531] netlink: 'syz.0.2473': attribute type 4 has an invalid length. [ 642.796905][T15531] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2473'. [ 642.840550][T15531] .`: renamed from bond0 [ 644.686356][T15590] netlink: 'syz.2.2485': attribute type 21 has an invalid length. [ 644.812028][T15590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2485'. [ 644.847288][T15586] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2484'. [ 646.490555][T15607] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2488'. [ 648.624919][T15627] netlink: 88204 bytes leftover after parsing attributes in process `syz.3.2496'. [ 648.902902][T15627] netlink: 'syz.3.2496': attribute type 1 has an invalid length. [ 649.485887][T15637] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2498'. [ 649.533785][T15641] netlink: 'syz.3.2499': attribute type 21 has an invalid length. [ 649.623390][T15637] netlink: 'syz.1.2498': attribute type 33 has an invalid length. [ 649.681333][T15637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2498'. [ 651.388301][T15658] C: renamed from team_slave_0 [ 651.443739][T15658] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 651.466897][T15658] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2503'. [ 651.472388][T15653] delete_channel: no stack [ 651.934561][T15674] netlink: 'syz.2.2507': attribute type 10 has an invalid length. [ 652.016127][T15674] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2507'. [ 652.875779][T15683] netlink: 'syz.3.2510': attribute type 1 has an invalid length. [ 652.898511][T15683] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2510'. [ 653.129293][T15683] netlink: 'syz.3.2510': attribute type 4 has an invalid length. [ 653.157344][T15683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2510'. [ 653.281212][T15683] wlan1: mtu less than device minimum [ 653.345258][T15700] netlink: 'syz.1.2513': attribute type 21 has an invalid length. [ 653.368555][T15700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2513'. [ 654.174100][T15718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2520'. [ 654.671232][T15735] netlink: 'syz.0.2526': attribute type 21 has an invalid length. [ 654.711201][T15735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2526'. [ 654.743905][T15730] netlink: 'syz.2.2523': attribute type 10 has an invalid length. [ 654.888950][T15730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2523'. [ 654.978665][T15730] ipvlan1: entered promiscuous mode [ 654.998864][T15730] ipvlan1: entered allmulticast mode [ 655.066067][T15730] veth0_vlan: entered allmulticast mode [ 655.427585][T15730] bridge0: port 3(ipvlan1) entered blocking state [ 655.512101][T15730] bridge0: port 3(ipvlan1) entered disabled state [ 655.533392][T15730] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 655.634803][T15738] 6: renamed from veth0_vlan (while UP) [ 655.663859][T15730] syz.2.2523 (15730) used greatest stack depth: 18088 bytes left [ 656.301463][T15763] netlink: 'syz.0.2528': attribute type 4 has an invalid length. [ 656.344117][T15763] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2528'. [ 656.438298][T15763] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 656.885288][T15783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2533'. [ 657.749612][T15792] netlink: 'syz.2.2536': attribute type 21 has an invalid length. [ 657.815745][T15792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2536'. [ 658.818672][T15816] netlink: 'syz.3.2542': attribute type 21 has an invalid length. [ 658.860916][T15816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2542'. [ 658.942881][T15807] netlink: 'syz.0.2540': attribute type 10 has an invalid length. [ 659.026159][T15807] netlink: 'syz.0.2540': attribute type 153 has an invalid length. [ 659.098259][T15807] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2540'. [ 659.692399][T15829] Ù: renamed from bond_slave_1 (while UP) [ 660.466037][T15852] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2549'. [ 660.607966][T15852] batadv_slave_1: entered promiscuous mode [ 660.676306][T15855] netlink: 'syz.2.2551': attribute type 21 has an invalid length. [ 660.887246][T15855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2551'. [ 661.021173][T15860] FAULT_INJECTION: forcing a failure. [ 661.021173][T15860] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 661.076878][T15860] CPU: 1 PID: 15860 Comm: syz.1.2552 Not tainted syzkaller #0 [ 661.084602][T15860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.094695][T15860] Call Trace: [ 661.098195][T15860] [ 661.101164][T15860] dump_stack_lvl+0x18c/0x250 [ 661.105886][T15860] ? show_regs_print_info+0x20/0x20 [ 661.111286][T15860] ? load_image+0x420/0x420 [ 661.115921][T15860] ? __might_fault+0xaa/0x120 [ 661.120641][T15860] ? __lock_acquire+0x7d40/0x7d40 [ 661.125718][T15860] should_fail_ex+0x39d/0x4d0 [ 661.130540][T15860] _copy_from_user+0x2f/0xe0 [ 661.135187][T15860] __sys_bpf+0x23e/0x890 [ 661.139478][T15860] ? bpf_link_show_fdinfo+0x390/0x390 [ 661.145082][T15860] ? lock_chain_count+0x20/0x20 [ 661.150000][T15860] __x64_sys_bpf+0x7c/0x90 [ 661.154455][T15860] do_syscall_64+0x55/0xa0 [ 661.158908][T15860] ? clear_bhb_loop+0x40/0x90 [ 661.163626][T15860] ? clear_bhb_loop+0x40/0x90 [ 661.168345][T15860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.174460][T15860] RIP: 0033:0x7fdf1df9c819 [ 661.178923][T15860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.198920][T15860] RSP: 002b:00007fdf1edd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 661.207468][T15860] RAX: ffffffffffffffda RBX: 00007fdf1e215fa0 RCX: 00007fdf1df9c819 [ 661.215575][T15860] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 661.223680][T15860] RBP: 00007fdf1edd2090 R08: 0000000000000000 R09: 0000000000000000 [ 661.231696][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.239975][T15860] R13: 00007fdf1e216038 R14: 00007fdf1e215fa0 R15: 00007ffcd69b8118 [ 661.248273][T15860] [ 661.407170][T15848] delete_channel: no stack [ 662.189286][T15892] netlink: 'syz.0.2560': attribute type 10 has an invalid length. [ 662.216762][T15892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2560'. [ 662.305779][T15892] ipvlan1: entered promiscuous mode [ 662.470102][T15892] ipvlan1: entered allmulticast mode [ 662.523853][T15892] veth0_vlan: entered allmulticast mode [ 662.635468][T15895] FAULT_INJECTION: forcing a failure. [ 662.635468][T15895] name failslab, interval 1, probability 0, space 0, times 1 [ 662.639201][T15892] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 662.667759][T15895] CPU: 0 PID: 15895 Comm: syz.1.2562 Not tainted syzkaller #0 [ 662.675283][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.685556][T15895] Call Trace: [ 662.688925][T15895] [ 662.691881][T15895] dump_stack_lvl+0x18c/0x250 [ 662.696679][T15895] ? show_regs_print_info+0x20/0x20 [ 662.701904][T15895] ? load_image+0x420/0x420 [ 662.706556][T15895] ? __might_sleep+0xe0/0xe0 [ 662.711207][T15895] ? __lock_acquire+0x7d40/0x7d40 [ 662.716444][T15895] ? mark_lock+0x94/0x320 [ 662.720883][T15895] should_fail_ex+0x39d/0x4d0 [ 662.725591][T15895] should_failslab+0x9/0x20 [ 662.730114][T15895] slab_pre_alloc_hook+0x59/0x310 [ 662.735243][T15895] ? __get_vm_area_node+0x125/0x370 [ 662.740656][T15895] __kmem_cache_alloc_node+0x53/0x250 [ 662.746146][T15895] ? __get_vm_area_node+0x125/0x370 [ 662.751641][T15895] kmalloc_node_trace+0x26/0xe0 [ 662.756682][T15895] __get_vm_area_node+0x125/0x370 [ 662.761729][T15895] __vmalloc_node_range+0x36e/0x1330 [ 662.767118][T15895] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 662.772771][T15895] ? __lock_acquire+0x1347/0x7d40 [ 662.777999][T15895] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 662.783820][T15895] ? free_vm_area+0x50/0x50 [ 662.788425][T15895] ? end_current_label_crit_section+0x170/0x170 [ 662.794678][T15895] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 662.800774][T15895] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 662.806329][T15895] __vmalloc+0x7a/0x90 [ 662.810417][T15895] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 662.815971][T15895] bpf_prog_alloc_no_stats+0x47/0x440 [ 662.821455][T15895] ? bpf_prog_alloc+0x2b/0x1a0 [ 662.826398][T15895] bpf_prog_alloc+0x3d/0x1a0 [ 662.831027][T15895] bpf_prog_load+0x6eb/0x1670 [ 662.835837][T15895] ? map_freeze+0x420/0x420 [ 662.840562][T15895] ? __might_fault+0xaa/0x120 [ 662.845267][T15895] ? __lock_acquire+0x7d40/0x7d40 [ 662.850418][T15895] ? file_end_write+0x159/0x250 [ 662.855568][T15895] ? __might_fault+0xaa/0x120 [ 662.860381][T15895] ? __might_fault+0xc6/0x120 [ 662.865131][T15895] ? __might_fault+0xaa/0x120 [ 662.869823][T15895] ? bpf_lsm_bpf+0x9/0x10 [ 662.874473][T15895] ? security_bpf+0x7e/0xa0 [ 662.879081][T15895] __sys_bpf+0x5ba/0x890 [ 662.883599][T15895] ? bpf_link_show_fdinfo+0x390/0x390 [ 662.889271][T15895] ? lock_chain_count+0x20/0x20 [ 662.894142][T15895] __x64_sys_bpf+0x7c/0x90 [ 662.898571][T15895] do_syscall_64+0x55/0xa0 [ 662.903093][T15895] ? clear_bhb_loop+0x40/0x90 [ 662.907875][T15895] ? clear_bhb_loop+0x40/0x90 [ 662.912658][T15895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.918569][T15895] RIP: 0033:0x7fdf1df9c819 [ 662.922997][T15895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.943137][T15895] RSP: 002b:00007fdf1edb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.951654][T15895] RAX: ffffffffffffffda RBX: 00007fdf1e216090 RCX: 00007fdf1df9c819 [ 662.959641][T15895] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 662.967800][T15895] RBP: 00007fdf1edb1090 R08: 0000000000000000 R09: 0000000000000000 [ 662.975779][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.983757][T15895] R13: 00007fdf1e216128 R14: 00007fdf1e216090 R15: 00007ffcd69b8118 [ 662.991754][T15895] [ 663.085097][T15895] syz.1.2562: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 663.327256][T15895] CPU: 0 PID: 15895 Comm: syz.1.2562 Not tainted syzkaller #0 [ 663.334961][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.345367][T15895] Call Trace: [ 663.348686][T15895] [ 663.351746][T15895] dump_stack_lvl+0x18c/0x250 [ 663.356649][T15895] ? show_regs_print_info+0x20/0x20 [ 663.361898][T15895] ? load_image+0x420/0x420 [ 663.366446][T15895] ? __rcu_read_unlock+0x7c/0xd0 [ 663.371509][T15895] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 663.378127][T15895] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 663.384667][T15895] warn_alloc+0x246/0x340 [ 663.389032][T15895] ? __get_vm_area_node+0x125/0x370 [ 663.394335][T15895] ? zone_watermark_ok_safe+0x230/0x230 [ 663.399938][T15895] ? rcu_is_watching+0x15/0xb0 [ 663.404753][T15895] ? __get_vm_area_node+0x356/0x370 [ 663.410070][T15895] __vmalloc_node_range+0x393/0x1330 [ 663.415389][T15895] ? __lock_acquire+0x1347/0x7d40 [ 663.420438][T15895] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 663.426265][T15895] ? free_vm_area+0x50/0x50 [ 663.430868][T15895] ? end_current_label_crit_section+0x170/0x170 [ 663.437221][T15895] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 663.443305][T15895] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 663.448864][T15895] __vmalloc+0x7a/0x90 [ 663.452959][T15895] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 663.458619][T15895] bpf_prog_alloc_no_stats+0x47/0x440 [ 663.464085][T15895] ? bpf_prog_alloc+0x2b/0x1a0 [ 663.468880][T15895] bpf_prog_alloc+0x3d/0x1a0 [ 663.473502][T15895] bpf_prog_load+0x6eb/0x1670 [ 663.478203][T15895] ? map_freeze+0x420/0x420 [ 663.482720][T15895] ? __might_fault+0xaa/0x120 [ 663.487586][T15895] ? __lock_acquire+0x7d40/0x7d40 [ 663.492629][T15895] ? file_end_write+0x159/0x250 [ 663.497495][T15895] ? __might_fault+0xaa/0x120 [ 663.502183][T15895] ? __might_fault+0xc6/0x120 [ 663.506866][T15895] ? __might_fault+0xaa/0x120 [ 663.511552][T15895] ? bpf_lsm_bpf+0x9/0x10 [ 663.515899][T15895] ? security_bpf+0x7e/0xa0 [ 663.520419][T15895] __sys_bpf+0x5ba/0x890 [ 663.524680][T15895] ? bpf_link_show_fdinfo+0x390/0x390 [ 663.530254][T15895] ? lock_chain_count+0x20/0x20 [ 663.535151][T15895] __x64_sys_bpf+0x7c/0x90 [ 663.539615][T15895] do_syscall_64+0x55/0xa0 [ 663.544055][T15895] ? clear_bhb_loop+0x40/0x90 [ 663.548757][T15895] ? clear_bhb_loop+0x40/0x90 [ 663.553568][T15895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.559478][T15895] RIP: 0033:0x7fdf1df9c819 [ 663.563908][T15895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.583987][T15895] RSP: 002b:00007fdf1edb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.592613][T15895] RAX: ffffffffffffffda RBX: 00007fdf1e216090 RCX: 00007fdf1df9c819 [ 663.600602][T15895] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 663.608767][T15895] RBP: 00007fdf1edb1090 R08: 0000000000000000 R09: 0000000000000000 [ 663.616750][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.624731][T15895] R13: 00007fdf1e216128 R14: 00007fdf1e216090 R15: 00007ffcd69b8118 [ 663.632849][T15895] [ 663.746934][T15895] Mem-Info: [ 663.750145][T15895] active_anon:10454 inactive_anon:0 isolated_anon:0 [ 663.750145][T15895] active_file:17726 inactive_file:40164 isolated_file:0 [ 663.750145][T15895] unevictable:768 dirty:170 writeback:0 [ 663.750145][T15895] slab_reclaimable:10595 slab_unreclaimable:95044 [ 663.750145][T15895] mapped:25209 shmem:1361 pagetables:608 [ 663.750145][T15895] sec_pagetables:0 bounce:0 [ 663.750145][T15895] kernel_misc_reclaimable:0 [ 663.750145][T15895] free:1339330 free_pcp:11338 free_cma:0 [ 663.812065][T15895] Node 0 active_anon:41816kB inactive_anon:0kB active_file:70904kB inactive_file:160452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100836kB dirty:676kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11380kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 663.855340][T15899] syzkaller0: entered promiscuous mode [ 663.862277][T15899] syzkaller0: entered allmulticast mode [ 663.864641][T15895] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 663.901962][T15895] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.976846][T15895] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 663.996834][T15895] Node 0 DMA32 free:1440980kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:41776kB inactive_anon:0kB active_file:70904kB inactive_file:159628kB unevictable:1536kB writepending:676kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:30692kB local_pcp:11116kB free_cma:0kB [ 664.148587][T15895] lowmem_reserve[]: 0 0 0 0 0 [ 664.153437][T15895] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 664.238589][T15895] lowmem_reserve[]: 0 0 0 0 0 [ 664.271570][T15895] Node 1 Normal free:3896948kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14368kB local_pcp:9184kB free_cma:0kB [ 664.378596][T15895] lowmem_reserve[]: 0 0 0 0 0 [ 664.383447][T15895] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 664.486565][T15895] Node 0 DMA32: 53*4kB (UME) 836*8kB (ME) 560*16kB (UM) 667*32kB (UM) 235*64kB (UM) 198*128kB (UM) 123*256kB (UM) 66*512kB (UM) 27*1024kB (UME) 14*2048kB (UM) 303*4096kB (UM) = 1440276kB [ 664.523304][T15895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 664.558141][T15895] Node 1 Normal: 249*4kB (UME) 48*8kB (UME) 35*16kB (UME) 157*32kB (UME) 45*64kB (UE) 10*128kB (UME) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3896948kB [ 664.696334][T15895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.742798][T15895] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 664.753334][T15895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.830972][T15895] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 664.875507][T15895] 59253 total pagecache pages [ 664.896913][T15895] 0 pages in swap cache [ 664.901224][T15895] Free swap = 124996kB [ 664.905410][T15895] Total swap = 124996kB [ 664.962875][T15895] 2097051 pages RAM [ 664.973033][T15895] 0 pages HighMem/MovableOnly [ 664.985640][T15895] 416926 pages reserved [ 664.990155][T15895] 0 pages cma reserved [ 671.622923][T15905] netlink: 'syz.2.2564': attribute type 21 has an invalid length. [ 671.631262][T15905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2564'. [ 673.488095][T15981] netlink: 'syz.1.2583': attribute type 21 has an invalid length. [ 673.545671][T15981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2583'. [ 674.070593][T15993] netlink: 'syz.2.2590': attribute type 10 has an invalid length. [ 674.085865][T15993] bond0: (slave bond_slave_0): Releasing backup interface [ 675.693739][T16020] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2598'. [ 675.945854][T16022] netlink: 'syz.2.2599': attribute type 21 has an invalid length. [ 676.166342][T16022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2599'. [ 676.243647][T16031] netlink: 'syz.3.2601': attribute type 5 has an invalid length. [ 678.183118][T16072] netlink: 'syz.0.2613': attribute type 21 has an invalid length. [ 678.260538][T16072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2613'. [ 678.761441][T16077] netlink: 'syz.3.2614': attribute type 6 has an invalid length. [ 678.802475][T16077] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2614'. [ 681.408573][T16125] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2625'. [ 681.420550][T16125] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2625'. [ 681.443102][T16125] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2625'. [ 681.581969][T16134] netlink: 'syz.1.2627': attribute type 21 has an invalid length. [ 681.640678][T16134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2627'. [ 682.839979][T16170] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2637'. [ 683.312812][T16171] veth1_to_bond: entered allmulticast mode [ 683.369588][T16173] netlink: 'syz.2.2638': attribute type 21 has an invalid length. [ 684.060249][T16195] netlink: 'syz.3.2644': attribute type 21 has an invalid length. [ 684.092254][T16195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2644'. [ 684.214071][T16190] netlink: 'syz.2.2643': attribute type 10 has an invalid length. [ 685.748238][T16226] sock: sock_set_timeout: `syz.1.2651' (pid 16226) tries to set negative timeout [ 686.182474][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.196833][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.571710][T16241] netlink: 'syz.0.2658': attribute type 21 has an invalid length. [ 686.607010][T16241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2658'. [ 687.901966][T16253] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2662'. [ 687.913841][T16253] openvswitch: netlink: Duplicate key (type 0). [ 688.016386][T16265] netlink: 'syz.1.2664': attribute type 9 has an invalid length. [ 688.265391][T16270] netlink: 'syz.1.2666': attribute type 2 has an invalid length. [ 688.274046][T16270] netlink: 'syz.1.2666': attribute type 9 has an invalid length. [ 688.283282][T16270] netlink: 'syz.1.2666': attribute type 10 has an invalid length. [ 688.310457][T16270] netlink: 'syz.1.2666': attribute type 11 has an invalid length. [ 688.320504][T16270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2666'. [ 688.425906][T16279] netlink: 'syz.3.2669': attribute type 3 has an invalid length. [ 688.442468][T16279] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2669'. [ 688.641171][T16286] netlink: 'syz.1.2671': attribute type 21 has an invalid length. [ 688.664768][T16286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2671'. [ 689.368148][T16304] netlink: 'syz.3.2675': attribute type 21 has an invalid length. [ 689.376169][T16304] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2675'. [ 689.464178][T16304] netlink: 'syz.3.2675': attribute type 4 has an invalid length. [ 689.499434][T16304] netlink: 'syz.3.2675': attribute type 5 has an invalid length. [ 689.542110][T16307] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2675'. [ 689.580354][T16304] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2675'. [ 689.602797][T16312] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2678'. [ 689.618637][T16312] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2678'. [ 689.630064][T16312] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2678'. [ 689.715207][T16314] netlink: 'syz.1.2677': attribute type 21 has an invalid length. [ 689.803318][T16316] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2679'. [ 690.543821][T16326] netlink: 'syz.3.2682': attribute type 10 has an invalid length. [ 690.616911][T16326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2682'. [ 690.656127][T16326] ipvlan1: entered promiscuous mode [ 690.683275][T16326] ipvlan1: entered allmulticast mode [ 690.702939][T16326] 6: entered allmulticast mode [ 690.738905][T16326] bridge0: port 3(ipvlan1) entered blocking state [ 690.786998][T16326] bridge0: port 3(ipvlan1) entered disabled state [ 690.809271][T16326] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 691.119058][T16334] netlink: 'syz.0.2685': attribute type 21 has an invalid length. [ 691.131758][T16334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2685'. [ 694.022133][T16364] netlink: 'syz.2.2692': attribute type 9 has an invalid length. [ 694.695133][T16371] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2693'. [ 694.774968][T16373] netlink: 'syz.2.2694': attribute type 11 has an invalid length. [ 694.908506][T16373] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2694'. [ 696.396500][T16382] netlink: 'syz.0.2696': attribute type 21 has an invalid length. [ 696.640386][T16382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2696'. [ 697.469291][T16395] netlink: 'syz.2.2701': attribute type 10 has an invalid length. [ 698.127052][T16399] netlink: 'syz.1.2702': attribute type 10 has an invalid length. [ 698.287470][T16399] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2702'. [ 699.980712][T16410] netlink: 'syz.3.2705': attribute type 64 has an invalid length. [ 700.456258][T16430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.500245][T16460] netlink: 'syz.3.2717': attribute type 21 has an invalid length. [ 701.658148][T16460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2717'. [ 704.367739][T16479] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2721'. [ 705.176172][T16497] netlink: 'syz.0.2726': attribute type 21 has an invalid length. [ 705.913279][T16521] netlink: 'syz.0.2731': attribute type 4 has an invalid length. [ 705.929082][T16521] netlink: 'syz.0.2731': attribute type 16 has an invalid length. [ 705.944339][T16521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2731'. [ 706.177354][T16520] netlink: 'syz.2.2730': attribute type 21 has an invalid length. [ 706.368594][T16520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2730'. [ 707.032677][T16533] C: renamed from team_slave_0 (while UP) [ 707.061005][T16533] netlink: 'syz.1.2732': attribute type 3 has an invalid length. [ 707.080463][T16533] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 707.239041][T16538] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2734'. [ 708.745303][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 708.894987][T16569] netlink: 'syz.3.2742': attribute type 21 has an invalid length. [ 708.951595][T16569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2742'. [ 710.088436][T16595] netlink: 'syz.2.2749': attribute type 1 has an invalid length. [ 710.116907][T16595] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2749'. [ 710.864372][T16602] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2752'. [ 713.705822][T16625] netlink: 'syz.1.2756': attribute type 21 has an invalid length. [ 713.733198][T16625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2756'. [ 714.127328][T16633] netlink: 'syz.0.2759': attribute type 21 has an invalid length. [ 714.135535][T16633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2759'. [ 716.224455][T16654] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2765'. [ 716.372918][T16656] netlink: 'syz.2.2764': attribute type 19 has an invalid length. [ 716.912120][T14664] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 716.957739][T16674] netlink: 'syz.0.2769': attribute type 21 has an invalid length. [ 716.966171][T16674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2769'. [ 717.314548][T16683] netlink: 'syz.2.2772': attribute type 28 has an invalid length. [ 717.356456][T16683] netlink: 'syz.2.2772': attribute type 29 has an invalid length. [ 717.373617][T16683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2772'. [ 718.100831][T14664] Bluetooth: hci3: unexpected subevent 0x0a length: 15 < 30 [ 719.267283][ T5774] Bluetooth: hci2: command tx timeout [ 721.697467][T16730] netlink: 'syz.0.2784': attribute type 21 has an invalid length. [ 721.728152][T16730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2784'. [ 721.964397][T16748] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2789'. [ 722.536261][T16761] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2794'. [ 723.902321][T16793] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2803'. [ 724.010632][T16795] netlink: 'syz.0.2804': attribute type 21 has an invalid length. [ 724.019517][T16795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2804'. [ 724.184010][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 724.239573][T16800] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 724.249756][T16800] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2805'. [ 724.259678][T16800] hsr0: entered promiscuous mode [ 724.267988][T16800] bridge0: port 3(hsr0) entered blocking state [ 724.274454][T16800] bridge0: port 3(hsr0) entered disabled state [ 724.281361][T16800] hsr0: entered allmulticast mode [ 724.287267][T16800] hsr_slave_0: entered allmulticast mode [ 724.292973][T16800] hsr_slave_1: entered allmulticast mode [ 724.323109][T16800] bridge0: port 3(hsr0) entered blocking state [ 724.329709][T16800] bridge0: port 3(hsr0) entered forwarding state [ 725.058344][T16815] netlink: 'syz.3.2809': attribute type 39 has an invalid length. [ 726.134174][T14664] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 726.539069][T16837] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.2814'. [ 726.934683][T16845] netlink: 'syz.1.2816': attribute type 21 has an invalid length. [ 726.947173][T16837] syz.3.2814[16837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.947384][T16837] syz.3.2814[16837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.972696][T16845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2816'. [ 727.105055][T16853] netlink: 'syz.0.2818': attribute type 39 has an invalid length. [ 727.264305][T16853] hsr_slave_1 (unregistering): left promiscuous mode [ 728.143132][T16872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.895468][T16895] netlink: 142556 bytes leftover after parsing attributes in process `syz.3.2830'. [ 728.946819][T16895] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 728.965986][T16895] netlink: 'syz.3.2830': attribute type 2 has an invalid length. [ 728.976771][T16895] netlink: 'syz.3.2830': attribute type 3 has an invalid length. [ 729.007047][T16895] netlink: 'syz.3.2830': attribute type 4 has an invalid length. [ 729.017586][T16891] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2829'. [ 729.031338][T16891] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.2829'. [ 729.373625][T16903] C: renamed from team_slave_0 (while UP) [ 729.625444][T16903] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2832'. [ 730.911177][T16923] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2836'. [ 731.015408][T16929] netlink: 'syz.3.2837': attribute type 10 has an invalid length. [ 731.123372][T16929] bond0: (slave bond_slave_0): Releasing backup interface [ 733.566925][T16958] netlink: 'syz.3.2844': attribute type 21 has an invalid length. [ 733.647032][T16958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2844'. [ 733.901951][T16967] netlink: 'syz.0.2846': attribute type 8 has an invalid length. [ 734.030562][T16967] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 734.123113][T16967] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2846'. [ 735.579430][T16990] mac80211_hwsim hwsim34 ..ãc¤±: renamed from wlan1 (while UP) [ 737.061334][T17010] netlink: 'syz.1.2856': attribute type 21 has an invalid length. [ 737.096022][T17010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2856'. [ 737.370401][T17017] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2859'. [ 737.413046][T17017] C: renamed from team_slave_0 [ 737.414823][T17020] netlink: 'syz.0.2861': attribute type 12 has an invalid length. [ 737.427747][T17020] netlink: 'syz.0.2861': attribute type 11 has an invalid length. [ 737.441004][T17017] netlink: 'syz.2.2859': attribute type 3 has an invalid length. [ 737.457022][T17017] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 737.471429][T17020] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.2861'. [ 738.030046][T17030] netlink: 'syz.0.2863': attribute type 3 has an invalid length. [ 738.292471][T17030] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2863'. [ 739.461740][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 739.798464][T17054] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2870'. [ 739.949156][T17063] netlink: 'syz.0.2872': attribute type 21 has an invalid length. [ 739.982350][T17063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2872'. [ 740.815162][T17072] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2875'. [ 740.852425][T17072] netlink: 'syz.3.2875': attribute type 2 has an invalid length. [ 742.934973][T17114] netlink: 'syz.2.2884': attribute type 21 has an invalid length. [ 742.967253][T17114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2884'. [ 745.246388][T17137] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 746.322850][T17159] netlink: 'syz.1.2895': attribute type 21 has an invalid length. [ 746.332157][T17159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2895'. [ 747.291185][T17174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2900'. [ 747.438597][T17177] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2901'. [ 747.461582][T17177] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2901'. [ 747.501595][T17177] tipc: Started in network mode [ 747.518211][T17177] tipc: Node identity b, cluster identity 73 [ 747.524579][T17177] tipc: Node number set to 11 [ 747.633878][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.645248][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.013855][T17194] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.245500][T17200] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2907'. [ 750.017228][T17246] netlink: 'syz.0.2921': attribute type 21 has an invalid length. [ 750.036918][T17246] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2921'. [ 750.142344][T17243] netlink: 'syz.2.2919': attribute type 9 has an invalid length. [ 750.186769][T17243] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2919'. [ 750.425088][T17261] netlink: 'syz.3.2922': attribute type 29 has an invalid length. [ 750.459369][T17250] netlink: 'syz.0.2921': attribute type 2 has an invalid length. [ 750.476840][T17250] netlink: 146448 bytes leftover after parsing attributes in process `syz.0.2921'. [ 750.487593][T17261] netlink: 'syz.3.2922': attribute type 29 has an invalid length. [ 750.501087][T17263] netlink: 'syz.3.2922': attribute type 29 has an invalid length. [ 752.505503][T17300] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2932'. [ 752.750972][T17308] netlink: 'syz.2.2934': attribute type 3 has an invalid length. [ 752.800040][T17308] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2934'. [ 752.834507][T17313] netlink: 'syz.0.2935': attribute type 1 has an invalid length. [ 753.218229][T17317] syzkaller0: entered promiscuous mode [ 753.236848][T17317] syzkaller0: entered allmulticast mode [ 753.700577][T17324] netlink: 'syz.3.2938': attribute type 29 has an invalid length. [ 758.470093][T17319] netlink: 'syz.0.2937': attribute type 4 has an invalid length. [ 758.482296][T17319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2937'. [ 758.492092][T17324] netlink: 'syz.3.2938': attribute type 29 has an invalid length. [ 758.603444][T17354] netlink: 'syz.2.2944': attribute type 21 has an invalid length. [ 758.621743][T17354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2944'. [ 759.076164][T17370] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2947'. [ 759.101623][T17373] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2947'. [ 759.376206][T17378] netlink: 'syz.0.2949': attribute type 10 has an invalid length. [ 760.671532][T17396] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2953'. [ 761.165659][T17403] netlink: 'syz.0.2956': attribute type 21 has an invalid length. [ 761.283714][T17403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2956'. [ 762.220499][T17413] netlink: 'syz.3.2959': attribute type 3 has an invalid length. [ 762.290986][T17413] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 763.293634][T17452] netlink: 'syz.0.2969': attribute type 21 has an invalid length. [ 763.382862][T17452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2969'. [ 764.764094][T17469] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 768.012538][T17490] netlink: 'syz.2.2977': attribute type 3 has an invalid length. [ 768.046877][T17490] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2977'. [ 768.497618][T17503] netlink: 'syz.3.2983': attribute type 21 has an invalid length. [ 768.609401][T17506] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2984'. [ 768.621811][T17503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2983'. [ 769.142117][T17517] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2987'. [ 770.698825][T17556] netlink: 'syz.3.2998': attribute type 21 has an invalid length. [ 770.839462][T17556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2998'. [ 771.020584][T17565] netlink: 'syz.2.3000': attribute type 10 has an invalid length. [ 772.430834][T17587] netlink: zone id is out of range [ 772.436367][T17587] netlink: set zone limit has 8 unknown bytes [ 773.015829][T17600] netlink: 'syz.2.3010': attribute type 21 has an invalid length. [ 773.046975][T17600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3010'. [ 773.297982][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.363411][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.540625][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.654617][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.687973][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.696202][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.734837][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.751433][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.782102][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.799176][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.813528][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.826929][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.849810][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.865853][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.882650][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.896430][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.912694][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.926592][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 773.941444][T17603] netlink: 'syz.1.3011': attribute type 2 has an invalid length. [ 773.956836][T17603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3011'. [ 778.930764][T17702] validate_nla: 4 callbacks suppressed [ 778.930784][T17702] netlink: 'syz.3.3038': attribute type 3 has an invalid length. [ 778.951235][T17702] __nla_validate_parse: 3 callbacks suppressed [ 778.951253][T17702] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3038'. [ 779.614589][T17715] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3042'. [ 779.653394][T17715] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3042'. [ 779.793477][T17716] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3042'. [ 780.519904][T17733] netlink: 'syz.2.3047': attribute type 2 has an invalid length. [ 780.578596][T17733] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3047'. [ 780.617363][T17734] syzkaller0: entered promiscuous mode [ 780.623124][T17734] syzkaller0: entered allmulticast mode [ 780.674687][T17738] netlink: 'syz.3.3048': attribute type 21 has an invalid length. [ 780.684963][T17738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3048'. [ 780.769607][T17737] netlink: 'syz.2.3047': attribute type 3 has an invalid length. [ 780.779777][T17740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3049'. [ 780.801159][T17737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3047'. [ 781.305815][T14664] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 781.312436][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 781.697612][T17748] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3050'. [ 783.901616][T17740] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3049'. [ 784.139731][T17765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3053'. [ 784.550329][T17775] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3057'. [ 784.596615][T17775] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 784.697258][T17779] netlink: 'syz.0.3059': attribute type 21 has an invalid length. [ 784.808255][T17779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3059'. [ 785.034899][T17787] netlink: 'syz.2.3062': attribute type 10 has an invalid length. [ 785.651621][T17792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3064'. [ 786.337151][T17809] netlink: set zone limit has 8 unknown bytes [ 786.714057][T17829] @0Ù: renamed from bond_slave_1 (while UP) [ 786.758729][T17834] netlink: 'syz.1.3073': attribute type 21 has an invalid length. [ 786.768955][T17834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3073'. [ 786.840914][T17833] netlink: 'syz.2.3074': attribute type 25 has an invalid length. [ 786.892071][T17833] netlink: 'syz.2.3074': attribute type 9 has an invalid length. [ 786.934288][T17829] ip6gretap0: refused to change device tx_queue_len [ 788.911074][T17858] netlink: 'syz.0.3080': attribute type 21 has an invalid length. [ 789.069143][T17858] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3080'. [ 789.469674][T17865] netlink: 'syz.2.3084': attribute type 10 has an invalid length. [ 789.499096][T17865] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3084'. [ 791.356301][T17867] netlink: 'syz.3.3085': attribute type 10 has an invalid length. [ 791.365597][T17867] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.373604][T17867] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.402619][T17867] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.410243][T17867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.418956][T17867] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.426313][T17867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.452583][T17867] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 791.462019][T17881] netlink: 12030 bytes leftover after parsing attributes in process `syz.0.3087'. [ 791.539077][T17884] team0: Port device C removed [ 791.551404][T17884] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 791.609324][T17886] netlink: 'syz.2.3091': attribute type 10 has an invalid length. [ 791.626266][T17886] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3091'. [ 792.154879][T17899] netlink: 'syz.0.3094': attribute type 2 has an invalid length. [ 792.579127][T17911] netlink: 'syz.0.3097': attribute type 21 has an invalid length. [ 792.638038][T17911] IPv6: NLM_F_CREATE should be specified when creating new route [ 792.695324][T17911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 792.703051][T17911] IPv6: NLM_F_CREATE should be set when creating new route [ 792.710570][T17911] IPv6: NLM_F_CREATE should be set when creating new route [ 792.717866][T17911] IPv6: NLM_F_CREATE should be set when creating new route [ 793.046556][T17921] netlink: 'syz.3.3099': attribute type 29 has an invalid length. [ 793.073260][T17921] netlink: 'syz.3.3099': attribute type 29 has an invalid length. [ 793.090670][T17919] netlink: 'syz.2.3100': attribute type 2 has an invalid length. [ 793.116837][T17919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3100'. [ 793.137634][T17921] netlink: 'syz.3.3099': attribute type 29 has an invalid length. [ 793.746043][T17923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3099'. [ 793.905473][T17930] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 794.521524][T17941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.091003][T17937] netlink: 'syz.0.3106': attribute type 10 has an invalid length. [ 798.600186][T17976] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 798.786579][T17990] netlink: 'syz.3.3117': attribute type 29 has an invalid length. [ 798.827585][T17990] netlink: 'syz.3.3117': attribute type 29 has an invalid length. [ 798.868043][T17995] netlink: 'syz.3.3117': attribute type 29 has an invalid length. [ 798.885066][T17990] netlink: 'syz.3.3117': attribute type 29 has an invalid length. [ 798.930317][T17990] netlink: 'syz.3.3117': attribute type 29 has an invalid length. [ 799.938303][T18021] netlink: 'syz.2.3125': attribute type 4 has an invalid length. [ 799.953344][T18021] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3125'. [ 801.689506][T18044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3134'. [ 801.847192][T18044] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 801.921039][T18044] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 803.079859][T18066] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3139'. [ 805.185514][T18081] netlink: 'syz.0.3142': attribute type 4 has an invalid length. [ 805.254539][T18081] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3142'. [ 805.377643][T18084] netlink: 'syz.2.3144': attribute type 21 has an invalid length. [ 806.254318][ T5774] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 806.439645][T18109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3150'. [ 806.598753][T18115] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3151'. [ 806.622151][T18115] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 806.642919][T18115] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 806.780435][T18115] netlink: 'syz.1.3151': attribute type 2 has an invalid length. [ 806.804865][T18115] netlink: 'syz.1.3151': attribute type 11 has an invalid length. [ 806.827559][T18115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3151'. [ 807.152079][T18120] netlink: 'syz.2.3152': attribute type 9 has an invalid length. [ 807.172484][T18120] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3152'. [ 808.313989][T18145] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3160'. [ 808.361912][T18145] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.3160'. [ 808.447033][T18145] netlink: 'syz.2.3160': attribute type 1 has an invalid length. [ 808.517168][T18155] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3159'. [ 809.067452][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.075780][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.274223][T18167] netlink: 'syz.1.3165': attribute type 25 has an invalid length. [ 809.294035][T18167] netlink: 'syz.1.3165': attribute type 29 has an invalid length. [ 809.401992][T18171] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 809.455746][T18171] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.3167'. [ 809.502934][T18171] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 809.699284][T18176] netlink: 'syz.3.3168': attribute type 1 has an invalid length. [ 809.709923][T18176] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3168'. [ 810.647201][T18192] validate_nla: 1 callbacks suppressed [ 810.647222][T18192] netlink: 'syz.2.3172': attribute type 21 has an invalid length. [ 811.569934][T18204] netlink: 'syz.2.3177': attribute type 9 has an invalid length. [ 811.582255][T18204] __nla_validate_parse: 1 callbacks suppressed [ 811.582274][T18204] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3177'. [ 812.053838][T18208] netlink: 'syz.2.3177': attribute type 9 has an invalid length. [ 812.065595][T18208] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3177'. [ 813.973610][T18240] netlink: 'syz.2.3186': attribute type 10 has an invalid length. [ 814.221366][T18240] bridge0: port 3(hsr0) entered disabled state [ 814.228252][T18240] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.236360][T18240] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.236358][T18263] ================================================================== [ 815.244531][T18263] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 815.252372][T18263] Write of size 48 at addr ffff888055b2af10 by task syz.3.3192/18263 [ 815.260581][T18263] [ 815.262929][T18263] CPU: 1 PID: 18263 Comm: syz.3.3192 Not tainted syzkaller #0 [ 815.270714][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 815.281208][T18263] Call Trace: [ 815.284608][T18263] [ 815.287578][T18263] dump_stack_lvl+0x18c/0x250 [ 815.292297][T18263] ? __lock_acquire+0x7d40/0x7d40 [ 815.297438][T18263] ? show_regs_print_info+0x20/0x20 [ 815.302766][T18263] ? load_image+0x420/0x420 [ 815.307338][T18263] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 815.313001][T18263] ? __virt_addr_valid+0x18c/0x540 [ 815.318140][T18263] ? __virt_addr_valid+0x469/0x540 [ 815.323280][T18263] print_report+0xa8/0x210 [ 815.327728][T18263] ? __bpf_get_stackid+0x6bf/0x900 [ 815.332982][T18263] kasan_report+0x117/0x150 [ 815.338051][T18263] ? __bpf_get_stackid+0x6bf/0x900 [ 815.343282][T18263] kasan_check_range+0x241/0x290 [ 815.348257][T18263] ? __bpf_get_stackid+0x6bf/0x900 [ 815.353524][T18263] __asan_memcpy+0x40/0x70 [ 815.357996][T18263] __bpf_get_stackid+0x6bf/0x900 [ 815.363061][T18263] bpf_get_stackid_pe+0x343/0x410 [ 815.368120][T18263] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 815.373689][T18263] bpf_overflow_handler+0x1fc/0x510 [ 815.379134][T18263] ? bpf_overflow_handler+0xde/0x510 [ 815.384450][T18263] ? tp_perf_event_destroy+0x20/0x20 [ 815.389764][T18263] ? __lock_acquire+0x1273/0x7d40 [ 815.394814][T18263] ? __perf_event_account_interrupt+0x187/0x280 [ 815.401088][T18263] __perf_event_overflow+0x447/0x630 [ 815.406583][T18263] perf_swevent_overflow+0x268/0x340 [ 815.412083][T18263] ? mark_lock+0x94/0x320 [ 815.416441][T18263] ? perf_event_switch_output+0x790/0x790 [ 815.422729][T18263] ? rcu_is_watching+0x15/0xb0 [ 815.427617][T18263] perf_swevent_event+0x45c/0x570 [ 815.432677][T18263] ? perf_tp_event+0x1520/0x1520 [ 815.437664][T18263] ___perf_sw_event+0x4a7/0x730 [ 815.442821][T18263] ? ___perf_sw_event+0x199/0x730 [ 815.447972][T18263] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 815.454684][T18263] ? __lock_acquire+0x1347/0x7d40 [ 815.459743][T18263] ? perf_trace_preemptirq_template+0xac/0x330 [ 815.465992][T18263] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 815.472080][T18263] ? lock_chain_count+0x20/0x20 [ 815.477279][T18263] __perf_sw_event+0x139/0x270 [ 815.482342][T18263] do_user_addr_fault+0x123e/0x12c0 [ 815.487848][T18263] ? rcu_is_watching+0x15/0xb0 [ 815.492760][T18263] exc_page_fault+0x64/0x100 [ 815.497391][T18263] asm_exc_page_fault+0x26/0x30 [ 815.502697][T18263] RIP: 0010:__put_user_4+0x11/0x20 [ 815.508010][T18263] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 815.527812][T18263] RSP: 0018:ffffc90002f17e80 EFLAGS: 00050206 [ 815.534003][T18263] RAX: 000000000000000b RBX: 0000000000000000 RCX: 00002000000029c0 [ 815.542189][T18263] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0 [ 815.550631][T18263] RBP: 000000000000000b R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 815.559099][T18263] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 0000000000000000 [ 815.567196][T18263] R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005 [ 815.575303][T18263] __sys_socketpair+0xb8/0x550 [ 815.580129][T18263] __x64_sys_socketpair+0x9b/0xb0 [ 815.585476][T18263] do_syscall_64+0x55/0xa0 [ 815.589932][T18263] ? clear_bhb_loop+0x40/0x90 [ 815.594684][T18263] ? clear_bhb_loop+0x40/0x90 [ 815.599706][T18263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.605827][T18263] RIP: 0033:0x7f6fcdb9c819 [ 815.610306][T18263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.630658][T18263] RSP: 002b:00007f6fce9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 815.639657][T18263] RAX: ffffffffffffffda RBX: 00007f6fcde15fa0 RCX: 00007f6fcdb9c819 [ 815.648019][T18263] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 815.656463][T18263] RBP: 00007f6fcdc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 815.664481][T18263] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000 [ 815.672505][T18263] R13: 00007f6fcde16038 R14: 00007f6fcde15fa0 R15: 00007fff4b856468 [ 815.680620][T18263] [ 815.683760][T18263] [ 815.686110][T18263] Allocated by task 18263: [ 815.690640][T18263] kasan_set_track+0x4e/0x70 [ 815.695272][T18263] __kasan_kmalloc+0x8f/0xa0 [ 815.699984][T18263] __kmalloc_node+0xb4/0x230 [ 815.704663][T18263] bpf_map_area_alloc+0x5e/0x110 [ 815.709657][T18263] prealloc_elems_and_freelist+0x86/0x1c0 [ 815.715468][T18263] stack_map_alloc+0x33a/0x4c0 [ 815.720342][T18263] map_create+0x877/0x12f0 [ 815.724840][T18263] __sys_bpf+0x651/0x890 [ 815.729094][T18263] __x64_sys_bpf+0x7c/0x90 [ 815.733601][T18263] do_syscall_64+0x55/0xa0 [ 815.738011][T18263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.744075][T18263] [ 815.746489][T18263] Last potentially related work creation: [ 815.752226][T18263] kasan_save_stack+0x3e/0x60 [ 815.756945][T18263] __kasan_record_aux_stack+0xaf/0xc0 [ 815.762433][T18263] call_rcu+0x153/0x950 [ 815.766764][T18263] __nf_register_net_hook+0x788/0x910 [ 815.772145][T18263] nf_register_net_hook+0xb2/0x190 [ 815.777890][T18263] nf_register_net_hooks+0x44/0x1b0 [ 815.783176][T18263] nf_ct_netns_do_get+0x3c0/0x5c0 [ 815.788201][T18263] nf_ct_netns_inet_get+0x1f/0x150 [ 815.793307][T18263] nf_conncount_init+0x127/0x380 [ 815.798258][T18263] ovs_ct_init+0x316/0x490 [ 815.802670][T18263] ovs_init_net+0x1e6/0x250 [ 815.807190][T18263] ops_init+0x397/0x640 [ 815.811348][T18263] setup_net+0x3b6/0xa30 [ 815.815711][T18263] copy_net_ns+0x36d/0x5e0 [ 815.820246][T18263] create_new_namespaces+0x3d3/0x6f0 [ 815.825899][T18263] copy_namespaces+0x430/0x4a0 [ 815.830853][T18263] copy_process+0x1724/0x3d80 [ 815.836092][T18263] kernel_clone+0x24b/0x8a0 [ 815.840960][T18263] __x64_sys_clone+0x1b7/0x230 [ 815.845993][T18263] do_syscall_64+0x55/0xa0 [ 815.851197][T18263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.857109][T18263] [ 815.859702][T18263] Second to last potentially related work creation: [ 815.866291][T18263] kasan_save_stack+0x3e/0x60 [ 815.871416][T18263] __kasan_record_aux_stack+0xaf/0xc0 [ 815.877088][T18263] call_rcu+0x153/0x950 [ 815.881335][T18263] __nf_register_net_hook+0x788/0x910 [ 815.887053][T18263] nf_register_net_hook+0xb2/0x190 [ 815.892251][T18263] nf_register_net_hooks+0x44/0x1b0 [ 815.897469][T18263] nf_ct_netns_do_get+0x213/0x5c0 [ 815.902846][T18263] nf_ct_netns_inet_get+0x3b/0x150 [ 815.907985][T18263] nf_conncount_init+0x127/0x380 [ 815.913268][T18263] ovs_ct_init+0x316/0x490 [ 815.917788][T18263] ovs_init_net+0x1e6/0x250 [ 815.922515][T18263] ops_init+0x397/0x640 [ 815.926683][T18263] setup_net+0x3b6/0xa30 [ 815.930952][T18263] copy_net_ns+0x36d/0x5e0 [ 815.935393][T18263] create_new_namespaces+0x3d3/0x6f0 [ 815.940792][T18263] copy_namespaces+0x430/0x4a0 [ 815.945663][T18263] copy_process+0x1724/0x3d80 [ 815.950340][T18263] kernel_clone+0x24b/0x8a0 [ 815.955187][T18263] __x64_sys_clone+0x1b7/0x230 [ 815.959947][T18263] do_syscall_64+0x55/0xa0 [ 815.964366][T18263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.970277][T18263] [ 815.972610][T18263] The buggy address belongs to the object at ffff888055b2af00 [ 815.972610][T18263] which belongs to the cache kmalloc-cg-64 of size 64 [ 815.987039][T18263] The buggy address is located 16 bytes inside of [ 815.987039][T18263] allocated 40-byte region [ffff888055b2af00, ffff888055b2af28) [ 816.001011][T18263] [ 816.003330][T18263] The buggy address belongs to the physical page: [ 816.009736][T18263] page:ffffea000156ca80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55b2a [ 816.020077][T18263] memcg:ffff8880262cf801 [ 816.024325][T18263] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 816.032394][T18263] page_type: 0xffffffff() [ 816.036900][T18263] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 0000000000000001 [ 816.045700][T18263] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880262cf801 [ 816.054543][T18263] page dumped because: kasan: bad access detected [ 816.061120][T18263] page_owner tracks the page as allocated [ 816.066925][T18263] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5768, tgid 5768 (syz-executor), ts 433161986120, free_ts 433161035850 [ 816.085789][T18263] post_alloc_hook+0x1c1/0x200 [ 816.090560][T18263] get_page_from_freelist+0x1951/0x19e0 [ 816.096138][T18263] __alloc_pages+0x1f0/0x460 [ 816.100740][T18263] alloc_slab_page+0x5d/0x160 [ 816.105527][T18263] new_slab+0x87/0x2d0 [ 816.109677][T18263] ___slab_alloc+0xc5d/0x12f0 [ 816.114390][T18263] __kmem_cache_alloc_node+0x19e/0x250 [ 816.120039][T18263] kmalloc_trace+0x2a/0xe0 [ 816.124742][T18263] alloc_fdtable+0xca/0x2c0 [ 816.129339][T18263] dup_fd+0x786/0xa50 [ 816.133324][T18263] copy_files+0xc3/0x120 [ 816.137692][T18263] copy_process+0x15ab/0x3d80 [ 816.142386][T18263] kernel_clone+0x24b/0x8a0 [ 816.147158][T18263] __x64_sys_clone+0x1b7/0x230 [ 816.152020][T18263] do_syscall_64+0x55/0xa0 [ 816.156517][T18263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.162628][T18263] page last free stack trace: [ 816.167303][T18263] free_unref_page_prepare+0x7b2/0x8c0 [ 816.173038][T18263] free_unref_page+0x32/0x2e0 [ 816.177716][T18263] vfree+0x1a6/0x320 [ 816.181809][T18263] do_ip6t_get_ctl+0xf21/0x1210 [ 816.186786][T18263] nf_getsockopt+0x262/0x280 [ 816.191677][T18263] ipv6_getsockopt+0x226/0x2e0 [ 816.196552][T18263] do_sock_getsockopt+0x379/0x450 [ 816.201631][T18263] __x64_sys_getsockopt+0x1d6/0x280 [ 816.207089][T18263] do_syscall_64+0x55/0xa0 [ 816.211499][T18263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.217479][T18263] [ 816.219795][T18263] Memory state around the buggy address: [ 816.225415][T18263] ffff888055b2ae00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 816.233487][T18263] ffff888055b2ae80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 816.241540][T18263] >ffff888055b2af00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 816.249681][T18263] ^ [ 816.255042][T18263] ffff888055b2af80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 816.263096][T18263] ffff888055b2b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 816.271149][T18263] ================================================================== [ 816.279202][T18263] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 816.286759][T18263] CPU: 1 PID: 18263 Comm: syz.3.3192 Not tainted syzkaller #0 [ 816.294299][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 816.304700][T18263] Call Trace: [ 816.308004][T18263] [ 816.311018][T18263] dump_stack_lvl+0x18c/0x250 [ 816.315789][T18263] ? show_regs_print_info+0x20/0x20 [ 816.321098][T18263] ? load_image+0x420/0x420 [ 816.325692][T18263] panic+0x2dc/0x730 [ 816.329676][T18263] ? __lock_acquire+0x7d40/0x7d40 [ 816.335062][T18263] ? bpf_jit_dump+0xd0/0xd0 [ 816.339586][T18263] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 816.345511][T18263] ? _raw_spin_unlock+0x40/0x40 [ 816.350362][T18263] ? __bpf_get_stackid+0x6bf/0x900 [ 816.355607][T18263] check_panic_on_warn+0x84/0xa0 [ 816.360855][T18263] ? __bpf_get_stackid+0x6bf/0x900 [ 816.366163][T18263] end_report+0x6f/0x130 [ 816.370440][T18263] kasan_report+0x128/0x150 [ 816.375121][T18263] ? __bpf_get_stackid+0x6bf/0x900 [ 816.380408][T18263] kasan_check_range+0x241/0x290 [ 816.386157][T18263] ? __bpf_get_stackid+0x6bf/0x900 [ 816.391315][T18263] __asan_memcpy+0x40/0x70 [ 816.396012][T18263] __bpf_get_stackid+0x6bf/0x900 [ 816.401410][T18263] bpf_get_stackid_pe+0x343/0x410 [ 816.406537][T18263] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 816.411997][T18263] bpf_overflow_handler+0x1fc/0x510 [ 816.417199][T18263] ? bpf_overflow_handler+0xde/0x510 [ 816.422657][T18263] ? tp_perf_event_destroy+0x20/0x20 [ 816.428028][T18263] ? __lock_acquire+0x1273/0x7d40 [ 816.433312][T18263] ? __perf_event_account_interrupt+0x187/0x280 [ 816.439729][T18263] __perf_event_overflow+0x447/0x630 [ 816.445307][T18263] perf_swevent_overflow+0x268/0x340 [ 816.450696][T18263] ? mark_lock+0x94/0x320 [ 816.455031][T18263] ? perf_event_switch_output+0x790/0x790 [ 816.461024][T18263] ? rcu_is_watching+0x15/0xb0 [ 816.465985][T18263] perf_swevent_event+0x45c/0x570 [ 816.471112][T18263] ? perf_tp_event+0x1520/0x1520 [ 816.476166][T18263] ___perf_sw_event+0x4a7/0x730 [ 816.481018][T18263] ? ___perf_sw_event+0x199/0x730 [ 816.486033][T18263] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 816.492440][T18263] ? __lock_acquire+0x1347/0x7d40 [ 816.497661][T18263] ? perf_trace_preemptirq_template+0xac/0x330 [ 816.504033][T18263] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 816.510211][T18263] ? lock_chain_count+0x20/0x20 [ 816.515067][T18263] __perf_sw_event+0x139/0x270 [ 816.519859][T18263] do_user_addr_fault+0x123e/0x12c0 [ 816.525165][T18263] ? rcu_is_watching+0x15/0xb0 [ 816.530041][T18263] exc_page_fault+0x64/0x100 [ 816.534824][T18263] asm_exc_page_fault+0x26/0x30 [ 816.539948][T18263] RIP: 0010:__put_user_4+0x11/0x20 [ 816.545290][T18263] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 816.565432][T18263] RSP: 0018:ffffc90002f17e80 EFLAGS: 00050206 [ 816.571590][T18263] RAX: 000000000000000b RBX: 0000000000000000 RCX: 00002000000029c0 [ 816.579917][T18263] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8de0 [ 816.588159][T18263] RBP: 000000000000000b R08: ffffffff8e8b0c2f R09: 1ffffffff1d16185 [ 816.596309][T18263] R10: dffffc0000000000 R11: fffffbfff1d16186 R12: 0000000000000000 [ 816.604699][T18263] R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005 [ 816.613482][T18263] __sys_socketpair+0xb8/0x550 [ 816.618363][T18263] __x64_sys_socketpair+0x9b/0xb0 [ 816.623411][T18263] do_syscall_64+0x55/0xa0 [ 816.627832][T18263] ? clear_bhb_loop+0x40/0x90 [ 816.632553][T18263] ? clear_bhb_loop+0x40/0x90 [ 816.637245][T18263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.643397][T18263] RIP: 0033:0x7f6fcdb9c819 [ 816.647911][T18263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.667710][T18263] RSP: 002b:00007f6fce9c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 816.676383][T18263] RAX: ffffffffffffffda RBX: 00007f6fcde15fa0 RCX: 00007f6fcdb9c819 [ 816.684462][T18263] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 816.692553][T18263] RBP: 00007f6fcdc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 816.700756][T18263] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000 [ 816.708903][T18263] R13: 00007f6fcde16038 R14: 00007f6fcde15fa0 R15: 00007fff4b856468 [ 816.716970][T18263] [ 816.720127][T18263] Kernel Offset: disabled [ 816.724665][T18263] Rebooting in 86400 seconds..