last executing test programs: 5.943305727s ago: executing program 0 (id=1489): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}], 0x20, 0xd0}, 0x810) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) getpid() (async) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}], 0x20, 0xd0}, 0x810) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) (async) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) (async) 5.709265563s ago: executing program 0 (id=1499): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x4100, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x9c, 0x9, 0x5, 0x0, 0x10001, 0x40c45, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000080), 0x8}, 0x100, 0xeec, 0xd, 0x9, 0xffffffffffff7fff, 0x93b, 0x0, 0x0, 0x100, 0x0, 0x9}, 0x0, 0xe, r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0xa1ff, 0x1f00c00e}, 0x4014) r2 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) setsockopt$sock_attach_bpf(r2, 0x114, 0xa, 0x0, 0x4) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xad44d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0xfff, 0xfffff271, 0x43, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r4) r8 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 5.331646712s ago: executing program 3 (id=1494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair(0x22, 0x2, 0x4, &(0x7f0000000800)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) sendmsg(r3, &(0x7f00000012c0)={&(0x7f0000000b80)=@isdn={0x22, 0xf7, 0x0, 0x9}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)="40b239451c7418403ceb61b4c4d1b5977cfb5ec6624a425eb6e3fa689b25a58f65fa8f14003faed727bd8a4be6dea3704121d1c577cb24077a2c9690d7365e10d08a48237979d382211ff7991a0b731f74", 0x51}, {&(0x7f0000000c80)="5c7b3b7e542865d4ef064be6d1829b10425c1cbf4f3450fe965531", 0x1b}, {&(0x7f0000000cc0)="606aaaa59a8f55ec59c3a42d80a70afa1f96f10a7f8d1c59d0b489f0ebad3c4a55bff90171416cd99b93ce63333ee020ac455925543d4d05e474d52d52d1b97484eb971744f7d836d203548bfcfc6aad85bbe4b5d9e41d445bf4dab81a5b0015811a00b4bff589fd6c97b8aa27dda9bc433ef83ac02b026a5e85b692d933c714759f09c7a3af2e218943a757d3e52b77a273c75fcf466a488ea35fdb5ed32fea544e9e7881f222b06f", 0xa9}, {&(0x7f0000000d80)="c5c7f9eeaa1582a6c204a762550b42", 0xf}, {&(0x7f0000000dc0)="e7f6df9574ce63d19edb880fc4a6005a9ad45609aaf319763bf9679fbe487a8cb961e3c627da9da94923b66002c9d3c6ae7e2867a36ecb725359c21cf47ae20f25f405e0e82611cbac6c793b1bbe3d78caf38a30d11a31ab0860b4b65e1a8abe7a0acaf7a089f5925f2ab1558a3d2ba5f4da08e68b82563df2b9573285668ab04e61dcc5cf10ffbe114abb2cb51edf777b7ef37c15875a1c453867bc459a1ef08c472a64f463fa8b73e89a2d4b5cb3b7", 0xb0}, {&(0x7f0000000e80)="11237e4096a23fa6d7333fd27ca3d444abb44def654ddc5bc766291fda56091d425a54acd185111d72bc05fa6b6b609d813f0e715625f24b0e3d1fcc5e6a56dca9b34a69a5d3ddd66901e1ab97b23f5a85cd9b29df89b130dc371c86ba898890cfafdb15fe5326e1362fa9f4ccbc094bd3f3797e3ca45a2cac32c69abb3ef3a7ff3b3f1bda95aad77b31b7604fc10d458bb2e6cd81564ec25e419a0a480ab509051f97fd398837b75f19be2f7f999bb902fbf621abd79ef08becbc2a5b49c22d4370730b16b157c3cb61fd5da06589f56462c701ab66588e4638d14c5c32e9711e21eccf4ef362485181e60381", 0xed}, {&(0x7f0000000f80)="9d22b016b0099ffc0be9c54228ebacde1b6f74f017e4449c241e3609f002b449e61295c0ad703dd2753b667db29d4f1a9ed1098a3d6a315031f4b9fbd94edbf4b55a9f4c8407571472feb9026519f01c813718f38f9a80e626c6577acd74ec71dc5d723ff2a33f758e1329bf5453f57e52bf8dc72c4ae837e76e104f4eceff279a97538b4420dd6a888d028e20445f7c1332c3bfe98533fe8c889099c9a693414678bc313e8a05d9cd8bf67f593d6c23c73274ea75e4ab5905c18f4af13eea4a7dd483689c1410477b051a18c954efa564f6156c5da53f3eafd46748e4bc2c89551e0e1d553968b7c5", 0xe9}], 0x7, &(0x7f0000001100)=[{0x88, 0x122, 0x1, "ab0cbbb7535b1e10be565a257484bc32b6a37ea564065041959a276249dcfeca0b9ad46968d3b366c77057dbc516cc137a15e9afd0c89c87265d054fd430775742580a3cb5bc92bd6e135a0d1caa8fad435510e531a3677835ad31827a0fd95662fd955a9e09e2324a16a8cde5a6622998a1339faf"}, {0x100, 0x110, 0xa, "4282ef432411553e50278e886dfa80e2e1bc21a419e4dbd0413bab54ef0420823cf490e162041b606edbaf368e319998f1f0635b547326148791214849d479cfb9fa59ea82bcc3f6477625fae7d5d3a0c399de745211b7d2ec70756f2287d7642cc49539e8b3ff11e3e97df48485196419a37fa1af90a3c886b71dcb63eb27593deaf1426c3fb472ccb8223f3ef8682fad08b2d9ff33bc014a42164fcfce7f60f914f2b17bb8a70561fb24bfe94187c070fc9c6b14390bf50da928282248b5859837d57f1fbcfed077dfec5256505341df7aba5266c631b97afc204f45953b8b5fc485d54887ab1459cb68"}, {0x18, 0x10c, 0x9, "bf510f4b"}], 0x1a0}, 0x20000001) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000009000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000002800000000000200000000000000000000000002000000000091ed87eb9c6318d41434b465c1"], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0xffffffb0}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r5, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000340)=[0x0, 0x0], 0x0, 0x1f, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0x1}, &(0x7f0000000780), &(0x7f00000007c0)='%pi6 \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x45, 0x0, 0x1, 0x6}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9, r8}, 0xc) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0xce2, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.162135006s ago: executing program 3 (id=1496): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 4.761097306s ago: executing program 3 (id=1498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) r4 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x2, 0xffffff78, 0x10000, r1, 0x1b, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @alu={0x7, 0x1, 0x5, 0x6, 0x0, 0x8, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @jmp={0x5, 0x0, 0x0, 0x1, 0x5, 0x80, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x26}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4001}], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.471386043s ago: executing program 1 (id=1501): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) 4.471202143s ago: executing program 0 (id=1502): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d204304de20c545883856768f0a078ee76c7f6889e4e585c8e10bd9f12022fe53dc5af69dec82b5ccc3e39f14455cbf72c0eaee22f555eef7771260273cf2fd1f3c8e50ab630867f8b6618dd2b79f514db98821c414c35251978bfebe6acb9091443dbb809751fd1164f0ae62880dbf6f3ba96f7c74bcc0a1f937193c7dcfdf536d8f2f44633d07b6dc68e147b1491252beeb6cf16ce08f33796bf569456f958181c40381f14f1f8c270841a6c08c", @ANYRES32=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000100fe160dff8500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 4.300036787s ago: executing program 1 (id=1503): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x480, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b83, 0x0, @perf_bp={0x0, 0x8}, 0x9000, 0x20000003, 0x81, 0x6, 0x0, 0x658, 0x3b1, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a001800050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.289466417s ago: executing program 0 (id=1511): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000bc0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x3}}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000e00)="27ddbb7b900f49e180a833285fc636be0f16ca70172ebf61361fcdd6f4280b5daba8360c37585ea3796e4a92e0b2224d55c6088628baeea7473d72e381aa03feeb640a8fab41974a067207007b6d1e7488044a0832b14e4238ec9de8b7935ad5cb8680e6944468175d2c59861d7e18f4dc9349988a03ea1c61197291af03ca49696c08d16395d6f729871d94d77dd3ec6af3f6d189283d6156fecb130b3ef95ba704524a41563fd269f99e6e7bf6ee6e35aba02d2a385a46e44dcde421c58bd659159c5515b828d3808dc461b54377599d0914c82b637b544b857000bdc4bfb04f30b9eca5a673985824da", 0xeb}, {&(0x7f0000000f00)="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", 0xfc}, {&(0x7f0000001000)="a11657ef1aacf0e42376ed37df4d5b4d0e04ee402729b13f37fd621fa01eb22e2bfd5bccc0c8830ea9e912b6e1d4cf5dd1550155836fef25f6c07434b3d0ab4aeabe5609942f070a17ab3f7359151807089535c3be92ed6c980d16cbc1419a2d4456338343ca4aee026af0300d77748e9a4aa3970e712f670b990bfa56d0af9697a85c9b6c994fe5a69211c63d0fdbf3e773cd6b4c0b9b3d8f0e82da0402948316c98514139a0ac5b2b0bbd8551febfcf9346f212cfefa16367e7cb907b182c1fa05880779c1f29b04e784275c7c7973acf9", 0xd2}, {&(0x7f0000001100)="3db20cfaa67232bbf6bdc6998feb310bc3905c6f9339f7c8ba294571630e44d0f8084ccbf231d346f056e4aa83f9960fdf04857575831bb61266d8ccfcbe5b4164ed4624f5dfe7d54dc9513b7d3999e05554ea997ee2b0ed843f78b90156716816dd3c377c6a9f7b438a13d52af20b6a4b9b52a14b0bfaa5b48e6f099a0d87c381d5ae7daf03634db700143f7549641afce883aa5dbc430e58ba", 0x9a}, {&(0x7f00000011c0)="7a1e67ce83cad51757b7de57937966eca8394b0576ae998bac135b84068e8514ad81ee866ca618c860839eb83ca8acbcd294d3d46972597c1cf450dd3f1eaa6b46638202a073786a245961f1f4e13db4587e", 0x4c}, {&(0x7f0000001240)="a42c21f26ba3892e2d31017c9c278bcb240492d9d3c96dd5f2c49b8d58350792bf4e64b1ff3d05cda4e0f4b46403660b6790eb2808f8dfb130e214d3408b2a64a6ca8147add14c7edc5c48b5ecdd166763f4b2e964ea0ce742d6a716147909f67d5b2b574e861ccf6560d93e65a039dacac277d40b2a2f2a591d91c87c16200bd84484", 0x83}, {&(0x7f0000001300)="e21a20a278440087c783af7fbe360b553f872f85608a2834b366f8246be7e2", 0x1f}, {&(0x7f0000001340)="0f192eb6", 0x4}, {&(0x7f0000000c00)="6d3014f9220ee566b7d9dd8d74a296400b69d47243caae6b9c72bf08815e1d3be6198900"}, {&(0x7f0000000dc0)="28969fe39537d023818019dfd981c11d51b67132ccea6b47458d"}], 0x8, &(0x7f0000001400)="20810d7d5c61c086e5c40f1f3be6eadd2db4e7ce388caeb565cf68422ba93a2b6d6e0ec060e406cef14ddb1e42b1f5918451583cb999b6bf443ee2", 0x3b, 0x240020c0}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f", 0x51}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}, {&(0x7f00000016c0)="62fd7c42e50da430b97ba0ac356b1c4d027dc5698e4fa8a32a4abf2ad55cec32e756ce3f059bdbfb2e70f716f39f09b0522b15f123cd5d124544e269f44b0b4a283096495dfc6e9dc653749cbd2bd598741f6cd7ca7657ecb676c6c5a39b0f53e08b4df82402daec1ebc17532c43bccc8c21fa8aee0452bc307afb408d53c896c5e2b5d59f63bd6ae0a1393fe61a808851c32715aa1e87497b17c28a90c274ad76458dccb87a0865147376d88c5a62e2c386a30f3455bb8a709acbffba87479a8d1045eb5f3cb35635f0b1bed6effc5658b197c6b935207989644fe67bd31a966d", 0xe1}], 0x4, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r8}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r2, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000805a501469e22493130a950000000000000200000018110000", @ANYRES8=r9, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r10, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r14}, &(0x7f0000000280), &(0x7f0000000240)=r12}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1, 0x10, &(0x7f00000014c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2ba73dd54171ccff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.891304627s ago: executing program 1 (id=1505): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0xfffffe61, &(0x7f0000000400)}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4, 0x9}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000b0e0000000000000000800018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000030000007b8bf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005400000095"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c1ee8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000840)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)="e403bbc1447af47917e1ba0972c50390a056979566cedbdd80c406558fa02832f6fb9262607ab5ac0abc79afeaddb68fc6fac1b06df65f882afca5a07e9d9558f8e9657ec17182de55b5e4f308aa83943b8c0f1f4b6670a07a9ddc30b594661a83726a5bc1d80ea8d8b67cc5acf0aa1993cfd8abf8d40171bf727560b2e29f1b0e7263131f0e", 0x86}], 0x1, &(0x7f00000006c0)=[{0xd0, 0x102, 0x6, "c355ce4b6df94e9b759397c798e4f4d5c3a49aa45b0cf293812c6bcdd41548ecfd023212676be0a8d09c4593f788179d5527d2882d2019a2ed1593563e056e2ce8149d223b1beb3fb888d3b88f2af1e4d383ab09fa782c518b85472937881a514eb4fc4623cd93cc2f84987ea33c7debd9f692c93ca6b5a67be47d6753e1800b8b0562abe9af18d31e43e510b07a3e22b8426147f60571af52159854b160aaec02d90ab0b5caf4461b1f8285047df47255af2423460cdaf8a4"}, {0x88, 0x103, 0x8, "5e1cafdf27bf35e9ace8436c342d8ce3cb02006fd18029a8734fb699761c5b46186107ae25edc399ef4bcadc33b694a743f33af6b1eee1a3b654e390ab5850a25ee1526c7a5e8fac57d62c89a24d7533f1928e6e0db75ac5108728ad4b09f9cb964f7dca94997d2fd913849c8a97e8d50284568d557036"}], 0x158}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.725939371s ago: executing program 3 (id=1506): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000a40)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc041389810039000000030fe30c000000000e0027008f000000028002922d1f", 0x2e}], 0x1}, 0x40) 3.652158162s ago: executing program 0 (id=1508): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000a40000006311770000000000070000000000000095000000000000007a4f59fc1e64cc9c718b1f618b12be81248ddd4fd95335dd8f7e942562f2e07ff439b8ebd5bf1b87624caf3c00d319595dd5bfad052f1b30283efb37457decd07d2d20a59a51c4a7a8edc4b83c47cf32281d4d6bfbcb8405ecded3e7c9fe2a85178e499cf5c1ed61b87fd0eecba4d4a2663bfd7a020593131c946bdbfaa22470da5ea8793e4e4021aac0c7e35d969e032bab41071b055868de1a52b91384cb1da034552a887fe6e12e080a95550d9ca32afe7aabb6"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="130000005200130001e96543f9ee605e1c"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff500", 0x1b}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000a40)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000900)=[{&(0x7f00000001c0)="7ed5f8f7b6af22586647d9cbcb753d1a958e2a358cbe4f1b91d0", 0x1a}, {&(0x7f0000000680)="2b092e00cf7584255a0b0854ab6e0126d05832a9b8059e42375562a65f13ac8770062730815bb7b48ff208c9b99b6df4c0ac0d7e59ca01bd20ec912f4a699a6b7b36ca0e12e415beb7565d2f2ea1e8ce06e1150b80ba97fdd4f0f4e47c634ba7aadfa136be04cf133491b66337378ea6a5d587c3048ace8f871fa8197ca7b0c1507f220c078c41b129e747869fa4b2bf1d72e7d723044f3fabde32fd96bace79824150260b8682fc", 0xa8}, {&(0x7f0000000840)="25ef0d0fb5a9f3e13ab95377c35e854a60284104372074219c493257dcd9467f7708256b899465cf34784bb29c2dce0a5cb3da5625effe02deeb1978878240bf7432089bfbd775da3501c61fd51a8b2c2506be83b3426aed6545b647988b6c219b64be1b5e7655871358d41c51ebcc38d49770e681b1abcca8d56aab04a2b92c562b9890748699d0476bdc985b0f74108ad6e0797e602cebd4bbf2c8b4a26e", 0x9f}], 0x3, &(0x7f0000000940)=[{0x50, 0x88, 0xffff7fff, "3cea79a572b699e55d153f5b14c207c9edd9d12eb7b675a8e696efdbdeffb69357e083dd2f7a29c338bcc9828cb43c811a054a13355121cfe4ede8"}, {0x88, 0x10e, 0x1, "b3f57cc02e6a074a20a78d26962a41fbe64b2fcf961208b5047215bf71bfb39c2d7ffa62bca5ab50609763f20ef0af358521b198054cbbe1fcd85f43892d12988dedc345f3fbc509ee7006fca1b004d864c29144dd88925591019945314fbdebc5636cc3a6e32b531567c70fd663f788ff4b71f6f0f4"}], 0xd8}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9febef0018010000000000001800000018000000060000000000efffa017a53f63934700000000000200000000040000000000000f03"], 0x0, 0x36}, 0x28) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0xfff5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff3c"], 0x280) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x2000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r9, &(0x7f00000001c0)="1950", 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000040000000900000008000000bf0a3156f4728a046d005a51e7ee35369e8569810f3b2653b9b1b59fd6980ebceb6fc4bb5064a55326766eac0316906946020000e2f1282cefd33d63cb52af9979e93816d6bbe7972e29fc1b72fb4fa521ce42718c5fb95e000000000046d79f84b3129921ac4971d1128ed34dbeeb25a048db1e32afa1a02779c936b13b7103feade91e8f36a2d2d164966d943f13108a2d373a1224834b20b698f3ca813007da1601156aaca4740d7bd5d4aa09c061333b3adf5c9806c7c3920010d0335a32230ae905a4a3da4c33e3796431b3b90d9433bb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 2.768748663s ago: executing program 1 (id=1510): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 2.604079557s ago: executing program 1 (id=1512): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x456c4997c6f4bb71, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8640, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r2, 0x4004743b, &(0x7f0000001200)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2.308052125s ago: executing program 3 (id=1513): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000000000010000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000a00)={&(0x7f0000000240)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f00000003c0)=""/253, 0xfd}, {&(0x7f0000000580)=""/4, 0x4}, {&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000008c0)=""/82, 0x52}], 0x7, &(0x7f00000009c0)=""/38, 0x26}, 0x10021) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xb5, 0x0, &(0x7f0000000b00)="b9ff03076044238cd00f6ead88a89a6db8dc71f920e03bc629ddf9c3530afbd60d2e61291ccbaf1e6565c59826ad298a1e204c46963dac58d2eed60295fccb27f1bc663d5928c5ae77581cc1c00dcdd0da655a5aa66a3dcffe7ed7a28469f4edcc9faeaa446b39259618074b297ab7ea79a6ae527216c20088efecd52c5e8d24284044c8ece6c2c0ab53885d0e05fd676b90c34f4a9f5982d3c18f03728806e73e9ceed574436bb6e7e7a667f10033409babd1a518", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x50) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x15) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000bf080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.871146125s ago: executing program 2 (id=1515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xd, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003500000095"], &(0x7f0000000140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x8}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000001480)=""/4096, 0x39, 0x1000, 0x0, 0x5, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000300), &(0x7f0000000340)='%pi6 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000024c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x18, 0x19, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0xffffffaa, 0x1000, &(0x7f0000000440)=""/4096, 0x40f00, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002500)=[r2, r3, 0xffffffffffffffff], &(0x7f0000002540)=[{0x4, 0x3, 0x0, 0x8}, {0x0, 0x3, 0x2, 0x5}, {0x5, 0x2, 0xa, 0x8}, {0x0, 0x4, 0xe, 0x5}, {0x5, 0x3, 0x3, 0xc}, {0x1, 0x1, 0x9, 0xc}, {0x2, 0x1, 0x10, 0xa}, {0x3, 0x3, 0x2}], 0x10, 0x7}, 0x94) 1.830178216s ago: executing program 2 (id=1516): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) (async) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0500ff00000047e1a1e85b000000c0e7610800007b1056e55b727264482dac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000200"/28], 0x50) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r2 = socket$kcm(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700), 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x804) (async) ioctl$TUNGETVNETLE(r3, 0x40107446, 0x0) syz_clone(0x25802000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) socket$kcm(0x28, 0x5, 0x0) (async) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x80044943, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.542810343s ago: executing program 2 (id=1517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$kcm(0x2, 0x922000000001, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000002c0)=r3, 0x8) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffc420, 0xa261, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x23}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e049133f0ad93e9620000000400000002", @ANYRES32=r4, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="00000000545f1f7f3d7f1f8e0b849ad03b732f0065338608f08c51cb0e916511c29f96af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r12, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x20040044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a8001600a40001400600", 0x3a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a00", 0x36}], 0x1}, 0x40008d4) socket$kcm(0x10, 0x2, 0x0) 1.380135567s ago: executing program 2 (id=1518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xf7) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/15, @ANYRES32=r0, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000001000000000000000000008018110000", @ANYRES32=r2, @ANYBLOB="00000000000096e35c4f771635cb060000b702000014000000b7060000400000008500000052000000bf09000000000000350901000000000095000800000000000085000000070095dee073f25816c68a6b1f43f391990004b7000100000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 171.386435ms ago: executing program 0 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x80108907, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) 171.019705ms ago: executing program 2 (id=1520): perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 170.332855ms ago: executing program 3 (id=1521): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x1, 0x0, &(0x7f0000000100)="ff", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000900fec0ffff00000e1208000f0100810401a80016ea1f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b336218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a509e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 71.359588ms ago: executing program 1 (id=1522): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f0000000040)="c906c46b8d4b1be7c5bc9345c46b46", 0x0, 0x0, 0x0, 0x7, 0x1, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100182c220f172265c4610000000400000002ffeb000000000004000004000000000000c48fd574dc8d59a4eaf690beba9c3ed931e704c8b22b23ac7352c5b6fcc8499d9a190707f64b91d16a"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0x41a0) recvmsg(0xffffffffffffffff, 0x0, 0x10100) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x2, 0x1, 0x84) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5}, 0x0, 0x32, 0x5, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 2 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x4}, 0x45}, 0x94) socket$kcm(0x10, 0x2, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x27fffc, 0x4, 0x6, 0x7}], 0x10, 0xfffffff6}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x7, 0x1, 0x4, 0x0, 0x4, 0x5a115, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x5124, 0x2, 0x3f, 0xb, 0x7, 0x6, 0x0, 0x0, 0x200, 0x0, 0xf}, 0xffffffffffffffff, 0x10, r6, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x6) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000440)='./cgroup\x00', r9}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts. [ 66.541385][ T5757] cgroup: Unknown subsys name 'net' [ 66.671124][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.074234][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.749856][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.759047][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.766731][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.774830][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.782481][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.790212][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.790839][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.798829][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.810070][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.820532][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.822229][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.827736][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.835552][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.849420][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.849613][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.866054][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.869450][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.881149][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.882038][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.888429][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.896041][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.911103][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.918399][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.925717][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.279755][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 70.356989][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 70.415901][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 70.481111][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.489210][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.496714][ T5770] bridge_slave_0: entered allmulticast mode [ 70.503956][ T5770] bridge_slave_0: entered promiscuous mode [ 70.533068][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.540256][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.547716][ T5770] bridge_slave_1: entered allmulticast mode [ 70.554653][ T5770] bridge_slave_1: entered promiscuous mode [ 70.561704][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 70.636985][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.656562][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.666228][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.673341][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.681519][ T5772] bridge_slave_0: entered allmulticast mode [ 70.688322][ T5772] bridge_slave_0: entered promiscuous mode [ 70.696899][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.703987][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.711374][ T5772] bridge_slave_1: entered allmulticast mode [ 70.718248][ T5772] bridge_slave_1: entered promiscuous mode [ 70.788342][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.795647][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.802809][ T5771] bridge_slave_0: entered allmulticast mode [ 70.809738][ T5771] bridge_slave_0: entered promiscuous mode [ 70.832150][ T5770] team0: Port device team_slave_0 added [ 70.851875][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.859711][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.867176][ T5771] bridge_slave_1: entered allmulticast mode [ 70.873852][ T5771] bridge_slave_1: entered promiscuous mode [ 70.883253][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.895393][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.905944][ T5770] team0: Port device team_slave_1 added [ 70.942421][ T5772] team0: Port device team_slave_0 added [ 70.979390][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.986892][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.994048][ T5769] bridge_slave_0: entered allmulticast mode [ 71.003222][ T5769] bridge_slave_0: entered promiscuous mode [ 71.012065][ T5772] team0: Port device team_slave_1 added [ 71.041228][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.051109][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.060948][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.068178][ T5769] bridge_slave_1: entered allmulticast mode [ 71.075572][ T5769] bridge_slave_1: entered promiscuous mode [ 71.090360][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.097466][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.123718][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.137763][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.175558][ T5771] team0: Port device team_slave_0 added [ 71.182156][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.189373][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.215678][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.227400][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.234793][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.260908][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.283382][ T5771] team0: Port device team_slave_1 added [ 71.290507][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.299739][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.326431][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.360901][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.372956][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.402860][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.410034][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.436311][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.479400][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.486993][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.518881][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.519237][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.536435][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.561365][ T5769] team0: Port device team_slave_0 added [ 71.573008][ T5772] hsr_slave_0: entered promiscuous mode [ 71.579670][ T5772] hsr_slave_1: entered promiscuous mode [ 71.600357][ T5770] hsr_slave_0: entered promiscuous mode [ 71.606745][ T5770] hsr_slave_1: entered promiscuous mode [ 71.612754][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.620838][ T5770] Cannot create hsr debugfs directory [ 71.629158][ T5769] team0: Port device team_slave_1 added [ 71.692143][ T5771] hsr_slave_0: entered promiscuous mode [ 71.698699][ T5771] hsr_slave_1: entered promiscuous mode [ 71.705242][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.712805][ T5771] Cannot create hsr debugfs directory [ 71.719113][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.726333][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.752416][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.787343][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.794986][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.821283][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.832261][ T5085] Bluetooth: hci1: command tx timeout [ 71.963402][ T5769] hsr_slave_0: entered promiscuous mode [ 71.969827][ T5769] hsr_slave_1: entered promiscuous mode [ 71.977582][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.985617][ T5085] Bluetooth: hci3: command tx timeout [ 71.991148][ T5085] Bluetooth: hci0: command tx timeout [ 71.996883][ T5777] Bluetooth: hci2: command tx timeout [ 71.998708][ T5769] Cannot create hsr debugfs directory [ 72.260641][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.271211][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.282032][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.291386][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.357617][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.368506][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.379698][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.390856][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.479152][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.495469][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.517043][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.543783][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.607633][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.617203][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.636886][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.645734][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.667929][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.715158][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.739844][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.766649][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.773860][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.798309][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.805441][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.839379][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.877064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.884252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.917217][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.924396][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.951394][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.067483][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.087863][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.111593][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.118807][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.162950][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.189898][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.197082][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.253343][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.260553][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.287833][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.295353][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.462892][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.513009][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.637924][ T5770] veth0_vlan: entered promiscuous mode [ 73.647088][ T5772] veth0_vlan: entered promiscuous mode [ 73.673385][ T5772] veth1_vlan: entered promiscuous mode [ 73.685701][ T5770] veth1_vlan: entered promiscuous mode [ 73.732804][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.764743][ T5770] veth0_macvtap: entered promiscuous mode [ 73.775867][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.784409][ T5770] veth1_macvtap: entered promiscuous mode [ 73.806310][ T5772] veth0_macvtap: entered promiscuous mode [ 73.820661][ T5772] veth1_macvtap: entered promiscuous mode [ 73.856505][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.871698][ T5769] veth0_vlan: entered promiscuous mode [ 73.888862][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.901716][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.912576][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.923469][ T5085] Bluetooth: hci1: command tx timeout [ 73.923812][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.939628][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.950062][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.963849][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.975232][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.992267][ T5769] veth1_vlan: entered promiscuous mode [ 74.003752][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.014493][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.026276][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.038024][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.049090][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.057963][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.069036][ T5085] Bluetooth: hci3: command tx timeout [ 74.075078][ T5777] Bluetooth: hci0: command tx timeout [ 74.075111][ T5785] Bluetooth: hci2: command tx timeout [ 74.080637][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.189985][ T5771] veth0_vlan: entered promiscuous mode [ 74.213940][ T5769] veth0_macvtap: entered promiscuous mode [ 74.239616][ T5769] veth1_macvtap: entered promiscuous mode [ 74.282198][ T5771] veth1_vlan: entered promiscuous mode [ 74.314887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.322918][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.346321][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.357128][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.367196][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.377822][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.391447][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.408564][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.422770][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.424437][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.435765][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.451663][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.462952][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.474780][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.525592][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.535344][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.544031][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.554230][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.585803][ T5771] veth0_macvtap: entered promiscuous mode [ 74.586093][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.607316][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.607841][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.621823][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.639953][ T5771] veth1_macvtap: entered promiscuous mode [ 74.673326][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.692634][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.703607][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.714725][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.724871][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.735437][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.756761][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.771184][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.785373][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.795590][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.806145][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.817583][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.828328][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.839630][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.880002][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.893857][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.903141][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.912046][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.033940][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.066943][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.176954][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.186855][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.215925][ T5835] netlink: 'syz.3.5': attribute type 8 has an invalid length. [ 75.231376][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.250537][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.261159][ T5835] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5'. [ 75.322714][ C0] hrtimer: interrupt took 70866 ns [ 75.353955][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.381096][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.678894][ T5845] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 75.701482][ T5845] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 75.709362][ T5845] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.987302][ T5785] Bluetooth: hci1: command tx timeout [ 76.145247][ T5785] Bluetooth: hci2: command tx timeout [ 76.150904][ T5785] Bluetooth: hci3: command tx timeout [ 76.154158][ T5085] Bluetooth: hci0: command tx timeout [ 76.209938][ T5851] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8'. [ 77.580365][ T5880] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.16'. [ 78.065731][ T5777] Bluetooth: hci1: command tx timeout [ 78.224217][ T5777] Bluetooth: hci3: command tx timeout [ 78.229722][ T5085] Bluetooth: hci2: command tx timeout [ 78.235184][ T5785] Bluetooth: hci0: command tx timeout [ 78.397495][ T5906] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 78.433178][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.475060][ T5906] bridge_slave_1: left allmulticast mode [ 78.489679][ T5906] bridge_slave_1: left promiscuous mode [ 78.524919][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.566804][ T5906] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 79.265696][ C1] Illegal XDP return value 16128 on prog (id 20) dev bridge_slave_1, expect packet loss! [ 80.461150][ T5923] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.28'. [ 80.536213][ T5923] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 81.923685][ T5943] netlink: 'syz.2.34': attribute type 8 has an invalid length. [ 81.950007][ T5943] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.34'. [ 83.442557][ T5975] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.42'. [ 83.490087][ T5975] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 83.971402][ T5986] netlink: 'syz.0.46': attribute type 8 has an invalid length. [ 83.984347][ T5986] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.46'. [ 84.651975][ T5996] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 84.680499][ T5996] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.51'. [ 85.210320][ T6011] netlink: 'syz.0.58': attribute type 9 has an invalid length. [ 85.243054][ T6011] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.58'. [ 85.434352][ T6020] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.63'. [ 85.874248][ T6034] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 85.920380][ T6034] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.66'. [ 85.960082][ T6028] syzkaller0: entered promiscuous mode [ 86.879015][ T175] cfg80211: failed to load regulatory.db [ 87.927042][ T6050] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 87.934973][ T6050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.71'. [ 87.943818][ T6054] netlink: 'syz.1.73': attribute type 10 has an invalid length. [ 87.952232][ T6054] netlink: 2 bytes leftover after parsing attributes in process `syz.1.73'. [ 87.975334][ T6054] hsr0: entered promiscuous mode [ 87.994314][ T6054] bridge0: port 2(hsr0) entered blocking state [ 88.000646][ T6054] bridge0: port 2(hsr0) entered disabled state [ 88.021392][ T6054] hsr0: entered allmulticast mode [ 88.026967][ T6054] hsr_slave_0: entered allmulticast mode [ 88.042796][ T6054] hsr_slave_1: entered allmulticast mode [ 88.087022][ T6057] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.75'. [ 88.097475][ T6054] bridge0: port 2(hsr0) entered blocking state [ 88.103977][ T6054] bridge0: port 2(hsr0) entered forwarding state [ 88.153728][ T6059] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.75'. [ 88.194463][ T6059] netlink: zone id is out of range [ 88.457276][ T6075] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.80'. [ 88.481818][ T6075] netlink: 6260 bytes leftover after parsing attributes in process `syz.2.80'. [ 88.551139][ T6075] netlink: 65 bytes leftover after parsing attributes in process `syz.2.80'. [ 88.979329][ T6101] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 88.995226][ T6101] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 89.122984][ T6101] syzkaller0: entered promiscuous mode [ 89.146125][ T6101] syzkaller0: entered allmulticast mode [ 89.257569][ T6107] netlink: 'syz.3.89': attribute type 27 has an invalid length. [ 90.442601][ T6113] netlink: 'syz.3.91': attribute type 12 has an invalid length. [ 90.844958][ T6127] netlink: 'syz.0.96': attribute type 13 has an invalid length. [ 90.862264][ T6127] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.96'. [ 91.481097][ T6134] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.98'. [ 91.560222][ T6134] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.98'. [ 93.523377][ T6146] netlink: 10 bytes leftover after parsing attributes in process `syz.0.101'. [ 94.652091][ T6149] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.102'. [ 94.779803][ T6154] netlink: 128 bytes leftover after parsing attributes in process `syz.0.102'. [ 94.822488][ T6154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.950372][ T6160] netlink: 105940 bytes leftover after parsing attributes in process `syz.2.105'. [ 94.979594][ T6152] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.103'. [ 95.015326][ T6152] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.103'. [ 95.040888][ T6151] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.103'. [ 95.068414][ T6168] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.103'. [ 95.153214][ T6151] netlink: 'syz.1.103': attribute type 10 has an invalid length. [ 95.176574][ T6151] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 95.183942][ T6151] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.229685][ T6151] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 96.258504][ T5777] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 97.479233][ T6231] netlink: 'syz.3.130': attribute type 4 has an invalid length. [ 97.489245][ T6231] __nla_validate_parse: 4 callbacks suppressed [ 97.489257][ T6231] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.130'. [ 98.792206][ T6278] netlink: 132 bytes leftover after parsing attributes in process `syz.1.144'. [ 99.089904][ T6291] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 99.098637][ T6291] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.150'. [ 99.995892][ T6317] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.158'. [ 100.020912][ T6317] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 100.030643][ T6317] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 100.348603][ T6325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.162'. [ 101.757823][ T6372] netlink: 'syz.1.174': attribute type 9 has an invalid length. [ 101.775018][ T6372] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.174'. [ 101.813746][ T6372] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 101.892808][ T6372] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.914427][ T6376] netlink: 'syz.2.176': attribute type 11 has an invalid length. [ 101.953612][ T6372] syz.1.174 (6372) used greatest stack depth: 19944 bytes left [ 102.755156][ T6401] netlink: 6 bytes leftover after parsing attributes in process `syz.0.184'. [ 102.800635][ T6401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.079754][ T6409] warning: `syz.1.187' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.561277][ T6435] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.195'. [ 103.977889][ T6445] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.199'. [ 104.019676][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 104.043330][ T6446] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.199'. [ 104.123861][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 104.268151][ T6453] netlink: 'syz.2.201': attribute type 21 has an invalid length. [ 104.314623][ T6453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.201'. [ 104.608499][ T6469] Zero length message leads to an empty skb [ 105.593731][ T6499] netlink: 'syz.1.213': attribute type 3 has an invalid length. [ 105.605229][ T6499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.213'. [ 107.251618][ T6510] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 107.281064][ T6510] macvlan0: entered promiscuous mode [ 107.294231][ T6510] macvlan0: entered allmulticast mode [ 107.323557][ T6510] veth1_vlan: entered allmulticast mode [ 107.369871][ T6510] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 107.439323][ T6529] netlink: 'syz.2.222': attribute type 21 has an invalid length. [ 107.514564][ T6529] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 107.543874][ T6529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.222'. [ 107.601277][ T6539] netlink: 'syz.3.224': attribute type 4 has an invalid length. [ 107.624825][ T6539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.224'. [ 107.661173][ T6539] netlink: 'syz.3.224': attribute type 4 has an invalid length. [ 107.708794][ T6535] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 108.774631][ T6574] syz.0.231 uses obsolete (PF_INET,SOCK_PACKET) [ 108.888830][ T6560] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 109.010852][ T6560] netlink: 'syz.1.229': attribute type 8 has an invalid length. [ 109.098950][ T6560] __nla_validate_parse: 2 callbacks suppressed [ 109.098967][ T6560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.229'. [ 109.246568][ T6585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.233'. [ 109.711364][ T6603] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 109.866930][ T6603] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.203895][ T6612] netlink: 'syz.3.241': attribute type 63 has an invalid length. [ 110.212433][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 110.221590][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 110.782456][ T6620] C: renamed from team_slave_0 (while UP) [ 110.836511][ T6619] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.898483][ T6620] netlink: 100 bytes leftover after parsing attributes in process `syz.2.243'. [ 110.977511][ T6620] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 110.997676][ T6623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.244'. [ 111.304429][ T6634] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.248'. [ 111.439210][ T6642] netlink: 144 bytes leftover after parsing attributes in process `syz.1.250'. [ 111.718163][ T6648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'. [ 111.824426][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.070869][ T6648] bridge_slave_0 (unregistering): left allmulticast mode [ 112.105233][ T6648] bridge_slave_0 (unregistering): left promiscuous mode [ 112.123860][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.125172][ T6665] validate_nla: 4 callbacks suppressed [ 113.125366][ T6665] netlink: 'syz.0.258': attribute type 10 has an invalid length. [ 113.850463][ T6665] bond0: (slave wlan1): Releasing backup interface [ 113.878583][ T6665] team0: Port device wlan1 added [ 113.957865][ T6665] syz.0.258 (6665) used greatest stack depth: 19880 bytes left [ 114.284497][ T6691] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 114.308091][ T6691] netlink: 'syz.3.264': attribute type 29 has an invalid length. [ 114.631426][ T6700] netlink: 'syz.2.267': attribute type 1 has an invalid length. [ 114.661812][ T6700] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.267'. [ 115.075348][ T6714] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 115.118706][ T6720] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 115.129812][ T6718] netlink: 'syz.2.274': attribute type 19 has an invalid length. [ 115.142927][ T6718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.274'. [ 115.710210][ T6732] netlink: 14 bytes leftover after parsing attributes in process `syz.1.277'. [ 115.764411][ T6732] netlink: get zone limit has 4 unknown bytes [ 115.998540][ T6736] netlink: 14 bytes leftover after parsing attributes in process `syz.0.278'. [ 116.311656][ T6736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.402128][ T6736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.462653][ T6736] bond0 (unregistering): Released all slaves [ 116.780621][ T6737] netlink: 'syz.0.278': attribute type 21 has an invalid length. [ 120.502745][ T6772] syzkaller0: entered promiscuous mode [ 120.539112][ T6772] syzkaller0: entered allmulticast mode [ 121.338313][ T6784] netlink: 'syz.2.292': attribute type 3 has an invalid length. [ 121.367963][ T6784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.292'. [ 121.984079][ T6791] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.295'. [ 121.997230][ T6791] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 123.097661][ T6799] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.297'. [ 124.899516][ T6805] netlink: 'syz.2.299': attribute type 3 has an invalid length. [ 124.914523][ T6805] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 124.945412][ T6805] netlink: 'syz.2.299': attribute type 7 has an invalid length. [ 124.953447][ T6805] netlink: 'syz.2.299': attribute type 8 has an invalid length. [ 124.972791][ T6805] netlink: 'syz.2.299': attribute type 7 has an invalid length. [ 124.994364][ T6805] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.299'. [ 126.381710][ T6810] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 126.431950][ T6810] netlink: 176 bytes leftover after parsing attributes in process `syz.3.300'. [ 126.674787][ T6821] netlink: 61991 bytes leftover after parsing attributes in process `syz.3.304'. [ 127.264881][ T6844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.312'. [ 127.340733][ T6844] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.312'. [ 127.509690][ T6847] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.313'. [ 127.519147][ T6847] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 128.103985][ T6858] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 128.187423][ T6858] team0: Device wg1 is of different type [ 128.217667][ T6855] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 128.225653][ T6855] netlink: 152 bytes leftover after parsing attributes in process `syz.1.316'. [ 128.255912][ T6857] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 128.272038][ T6857] team0: Device wg1 is of different type [ 128.575804][ T6876] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 129.230344][ T6941] netlink: 'syz.2.329': attribute type 9 has an invalid length. [ 129.293224][ T6941] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.329'. [ 130.022925][ T6969] delete_channel: no stack [ 130.037368][ T6969] delete_channel: no stack [ 130.256015][ T6975] netlink: 'syz.3.341': attribute type 6 has an invalid length. [ 130.263839][ T6975] netlink: 164 bytes leftover after parsing attributes in process `syz.3.341'. [ 130.882696][ T6991] sit0: entered allmulticast mode [ 130.934344][ T6993] sit0: entered promiscuous mode [ 132.431885][ T7026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 132.492921][ T7022] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.355'. [ 132.502414][ T7026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 132.566560][ T7029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 132.597084][ T7031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.356'. [ 132.835254][ T7041] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.359'. [ 132.847314][ T7033] syzkaller0: entered promiscuous mode [ 132.866193][ T7033] syzkaller0: entered allmulticast mode [ 132.924854][ T7041] netlink: 144 bytes leftover after parsing attributes in process `syz.0.359'. [ 132.991536][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.998030][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105040][ T7041] team0: Port device team_slave_0 removed [ 133.135038][ T7041] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 133.545826][ T7055] netlink: 'syz.0.363': attribute type 9 has an invalid length. [ 133.563962][ T7055] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.363'. [ 133.614598][ T7057] netlink: 'syz.0.363': attribute type 9 has an invalid length. [ 133.664549][ T7057] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.363'. [ 136.481077][ T7059] netlink: 'syz.2.364': attribute type 22 has an invalid length. [ 136.491545][ T7059] netlink: 7404 bytes leftover after parsing attributes in process `syz.2.364'. [ 136.516176][ T7069] netlink: 'syz.0.366': attribute type 2 has an invalid length. [ 137.054328][ T7082] netlink: 'syz.1.368': attribute type 21 has an invalid length. [ 137.072799][ T7082] netlink: 'syz.1.368': attribute type 4 has an invalid length. [ 137.511716][ T7108] netlink: 'syz.0.376': attribute type 10 has an invalid length. [ 137.692246][ T7108] team0: Device gre0 is of different type [ 138.042246][ T7117] syzkaller0: entered promiscuous mode [ 138.047992][ T7117] syzkaller0: entered allmulticast mode [ 138.246479][ T7108] syz.0.376 (7108) used greatest stack depth: 17896 bytes left [ 138.401168][ T7135] __nla_validate_parse: 3 callbacks suppressed [ 138.401184][ T7135] netlink: 188 bytes leftover after parsing attributes in process `syz.0.384'. [ 138.596086][ T7144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.178058][ T7134] netlink: 168 bytes leftover after parsing attributes in process `syz.3.383'. [ 140.247008][ T7164] netlink: 830 bytes leftover after parsing attributes in process `syz.2.392'. [ 140.822682][ T7181] netlink: 'syz.1.398': attribute type 33 has an invalid length. [ 140.841173][ T7181] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.398'. [ 141.136542][ T7202] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.405'. [ 141.154228][ T7202] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.405'. [ 141.208150][ T7202] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.405'. [ 141.378070][ T7209] netlink: 763 bytes leftover after parsing attributes in process `syz.0.408'. [ 141.509963][ T7211] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.409'. [ 141.632331][ T7214] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.410'. [ 143.374645][ T7282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.587451][ T7290] netlink: 'syz.2.431': attribute type 10 has an invalid length. [ 143.619238][ T7290] __nla_validate_parse: 5 callbacks suppressed [ 143.619253][ T7290] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.431'. [ 144.339250][ T7299] netlink: 'syz.1.436': attribute type 3 has an invalid length. [ 144.364396][ T7299] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 144.372097][ T7299] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.436'. [ 144.669496][ T7317] netlink: 128 bytes leftover after parsing attributes in process `syz.1.442'. [ 144.721647][ T7317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.843843][ T7316] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 144.857447][ T7316] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.441'. [ 145.331541][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 145.964817][ T7359] netlink: 'syz.2.454': attribute type 21 has an invalid length. [ 145.972855][ T7359] netlink: 14530 bytes leftover after parsing attributes in process `syz.2.454'. [ 146.416790][ T7378] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.461'. [ 146.441404][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 146.510028][ T7381] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 146.521247][ T7381] netlink: 'syz.3.460': attribute type 2 has an invalid length. [ 146.540184][ T7381] netlink: 'syz.3.460': attribute type 2 has an invalid length. [ 146.561381][ T7381] netlink: 'syz.3.460': attribute type 3 has an invalid length. [ 146.586202][ T7381] netlink: 'syz.3.460': attribute type 4 has an invalid length. [ 146.603607][ T7381] netlink: 'syz.3.460': attribute type 5 has an invalid length. [ 146.621420][ T7381] netlink: 'syz.3.460': attribute type 6 has an invalid length. [ 146.629910][ T7381] netlink: 'syz.3.460': attribute type 7 has an invalid length. [ 146.648244][ T7381] netlink: 'syz.3.460': attribute type 9 has an invalid length. [ 146.660646][ T7381] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.460'. [ 147.518632][ T7444] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.468'. [ 149.191601][ T7500] delete_channel: no stack [ 149.241947][ T7500] delete_channel: no stack [ 149.264782][ T7506] __nla_validate_parse: 1 callbacks suppressed [ 149.264829][ T7506] netlink: 10 bytes leftover after parsing attributes in process `syz.0.487'. [ 149.912414][ T7530] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.494'. [ 149.960634][ T7516] syz.2.490 (7516) used obsolete PPPIOCDETACH ioctl [ 150.565899][ T7541] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.498'. [ 150.584780][ T7541] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 150.628685][ T7541] netlink: 164 bytes leftover after parsing attributes in process `syz.3.498'. [ 151.260609][ T7570] validate_nla: 9 callbacks suppressed [ 151.260627][ T7570] netlink: 'syz.3.507': attribute type 12 has an invalid length. [ 151.304509][ T7570] netlink: 'syz.3.507': attribute type 11 has an invalid length. [ 151.317558][ T7570] netlink: 168088 bytes leftover after parsing attributes in process `syz.3.507'. [ 152.009706][ T7614] netlink: 'syz.3.518': attribute type 21 has an invalid length. [ 152.185829][ T7623] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.521'. [ 152.205891][ T7623] netlink: del zone limit has 8 unknown bytes [ 152.329861][ T7623] pim6reg1: entered promiscuous mode [ 152.347268][ T7623] pim6reg1: entered allmulticast mode [ 152.375576][ T7623] IPv6: Can't replace route, no match found [ 152.710777][ T7636] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 152.729020][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.784905][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.792612][ T7636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.837928][ T7636] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.209662][ T7654] netlink: 'syz.3.533': attribute type 39 has an invalid length. [ 154.235573][ T7682] netlink: 'syz.0.540': attribute type 28 has an invalid length. [ 154.243437][ T7682] netlink: 'syz.0.540': attribute type 4 has an invalid length. [ 154.277698][ T7682] netlink: 136 bytes leftover after parsing attributes in process `syz.0.540'. [ 154.299918][ T7685] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 154.337967][ T7685] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 154.358802][ T7685] bond0: (slave netdevsim0): Releasing backup interface [ 154.400909][ T7682] netlink: 'syz.0.540': attribute type 10 has an invalid length. [ 154.471005][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.501727][ T7682] bridge_slave_1: left allmulticast mode [ 154.514384][ T7682] bridge_slave_1: left promiscuous mode [ 154.532853][ T7682] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.582042][ T7690] hsr0: left allmulticast mode [ 154.595439][ T7690] hsr_slave_0: left allmulticast mode [ 154.609445][ T7690] hsr_slave_1: left allmulticast mode [ 154.619708][ T7690] bridge0: port 2(hsr0) entered disabled state [ 154.682260][ T7690] bridge_slave_0: left allmulticast mode [ 154.703676][ T7690] bridge_slave_0: left promiscuous mode [ 154.730642][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.025492][ T7708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.475875][ T7751] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.559'. [ 156.533356][ T7755] netlink: 'syz.2.561': attribute type 10 has an invalid length. [ 156.557072][ T7755] netlink: 55 bytes leftover after parsing attributes in process `syz.2.561'. [ 156.627038][ T7751] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 156.697014][ T7751] team0: Device wg1 is of different type [ 156.751706][ T7756] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 156.771626][ T7756] netlink: 'syz.3.560': attribute type 4 has an invalid length. [ 156.811593][ T7756] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.560'. [ 156.829718][ T7753] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 156.854766][ T7753] netlink: 'syz.3.560': attribute type 4 has an invalid length. [ 156.873048][ T7753] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.560'. [ 156.915308][ T7761] netlink: 'syz.2.562': attribute type 3 has an invalid length. [ 156.923008][ T7761] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'. [ 157.277222][ T7779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 157.481618][ T7779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.565'. [ 158.347331][ T7815] netlink: set zone limit has 8 unknown bytes [ 158.704612][ T7826] netlink: 188 bytes leftover after parsing attributes in process `syz.3.580'. [ 160.440380][ T7847] netlink: 10 bytes leftover after parsing attributes in process `syz.3.586'. [ 161.713211][ T7864] ref_ctr_offset mismatch. inode: 0x30c offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 161.790227][ T7867] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 161.814619][ T7867] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 161.844280][ T7867] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 161.872813][ T7867] netlink: 'syz.3.591': attribute type 29 has an invalid length. [ 161.988499][ T7867] tap0: tun_chr_ioctl cmd 1074025677 [ 162.003929][ T7867] tap0: linktype set to 776 [ 163.533695][ T7908] netlink: 'syz.0.605': attribute type 2 has an invalid length. [ 163.572750][ T7908] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 163.633195][ T7908] netlink: 'syz.0.605': attribute type 8 has an invalid length. [ 163.672634][ T7908] netlink: 88 bytes leftover after parsing attributes in process `syz.0.605'. [ 163.712578][ T7912] netlink: 'syz.1.606': attribute type 10 has an invalid length. [ 163.870621][ T7920] netlink: 'syz.3.608': attribute type 2 has an invalid length. [ 163.892665][ T7920] netlink: 132 bytes leftover after parsing attributes in process `syz.3.608'. [ 164.475364][ T7933] netlink: 'syz.2.612': attribute type 39 has an invalid length. [ 164.857204][ T7947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.617'. [ 165.108364][ T7954] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.618'. [ 165.128593][ T7954] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.618'. [ 167.218032][ T8018] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.638'. [ 167.275980][ T8022] netlink: 'syz.0.640': attribute type 46 has an invalid length. [ 167.295025][ T8022] netlink: 55 bytes leftover after parsing attributes in process `syz.0.640'. [ 167.385676][ T8027] netlink: 'syz.0.640': attribute type 27 has an invalid length. [ 167.425736][ T8027] netlink: 'syz.0.640': attribute type 3 has an invalid length. [ 168.720449][ T8071] netlink: 'syz.0.650': attribute type 1 has an invalid length. [ 168.739396][ T8067] netlink: 'syz.0.650': attribute type 1 has an invalid length. [ 168.746610][ T8071] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.650'. [ 168.764593][ T8069] netlink: 'syz.3.651': attribute type 29 has an invalid length. [ 168.775480][ T8069] netlink: 'syz.3.651': attribute type 29 has an invalid length. [ 168.783598][ T8067] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.650'. [ 168.800443][ T8069] netlink: 'syz.3.651': attribute type 29 has an invalid length. [ 168.823416][ T8069] netlink: 'syz.3.651': attribute type 29 has an invalid length. [ 171.198566][ T8129] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.668'. [ 171.453660][ T8140] netlink: 'syz.0.669': attribute type 29 has an invalid length. [ 171.661730][ T8142] netlink: 10 bytes leftover after parsing attributes in process `syz.2.672'. [ 172.365448][ T8163] netlink: 830 bytes leftover after parsing attributes in process `syz.3.678'. [ 172.393455][ T8165] validate_nla: 1 callbacks suppressed [ 172.393471][ T8165] netlink: 'syz.0.679': attribute type 16 has an invalid length. [ 172.424330][ T8165] netlink: 'syz.0.679': attribute type 3 has an invalid length. [ 172.445667][ T8168] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.678'. [ 172.483271][ T8165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.679'. [ 172.504444][ T8163] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.678'. [ 172.820993][ T8186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.683'. [ 173.070313][ T8196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.521611][ T8216] netlink: 'syz.2.693': attribute type 21 has an invalid length. [ 173.542026][ T8216] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.553615][ T8216] IPv6: Can't replace route, no match found [ 173.611866][ T8225] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.695'. [ 173.666840][ T8227] netlink: 'syz.2.696': attribute type 8 has an invalid length. [ 173.676498][ T8227] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.696'. [ 173.705213][ T8225] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 173.812930][ T8227] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 173.823440][ T8231] netlink: 'syz.3.697': attribute type 9 has an invalid length. [ 173.834336][ T8231] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.697'. [ 173.843294][ T8227] netlink: 152 bytes leftover after parsing attributes in process `syz.2.696'. [ 173.926272][ T8227] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 174.979542][ T8261] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.707'. [ 175.008074][ T8261] bridge_slave_1: default FDB implementation only supports local addresses [ 176.556860][ T8294] netlink: 'syz.3.720': attribute type 2 has an invalid length. [ 176.570259][ T8296] netlink: 'syz.2.722': attribute type 10 has an invalid length. [ 176.811256][ T8296] team0: Device vxcan1 is of different type [ 177.296683][ T8313] netlink: 'syz.0.727': attribute type 3 has an invalid length. [ 177.587803][ T8322] sit0: entered allmulticast mode [ 177.802863][ T8322] sit0: entered promiscuous mode [ 178.294546][ T8327] netlink: 'syz.2.733': attribute type 21 has an invalid length. [ 178.303097][ T8327] __nla_validate_parse: 4 callbacks suppressed [ 178.303138][ T8327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.733'. [ 181.583465][ T8385] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 181.906261][ T8397] netlink: 'syz.2.751': attribute type 8 has an invalid length. [ 181.935284][ T8397] netlink: 'syz.2.751': attribute type 3 has an invalid length. [ 181.942983][ T8397] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.751'. [ 182.050087][ T8403] netlink: 'syz.1.753': attribute type 27 has an invalid length. [ 182.076310][ T8403] netlink: 'syz.1.753': attribute type 3 has an invalid length. [ 182.133285][ T8403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.423325][ T8419] netlink: 'syz.0.758': attribute type 1 has an invalid length. [ 182.438901][ T8420] netlink: 'syz.1.756': attribute type 3 has an invalid length. [ 182.441712][ T8419] netlink: 'syz.0.758': attribute type 3 has an invalid length. [ 182.446770][ T8420] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 182.446816][ T8420] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.756'. [ 182.474761][ T8419] netlink: 132 bytes leftover after parsing attributes in process `syz.0.758'. [ 182.489437][ T8419] netlink: 'syz.0.758': attribute type 10 has an invalid length. [ 182.497868][ T8419] netlink: 168 bytes leftover after parsing attributes in process `syz.0.758'. [ 182.523578][ T8422] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.759'. [ 182.892821][ T8437] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.764'. [ 182.923520][ T8437] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 184.695632][ T5777] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 184.773092][ T8492] netlink: 140 bytes leftover after parsing attributes in process `syz.0.780'. [ 184.820375][ T8492] netlink: 6 bytes leftover after parsing attributes in process `syz.0.780'. [ 187.848839][ T8552] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.798'. [ 187.980880][ T8554] delete_channel: no stack [ 188.222357][ T8563] validate_nla: 1 callbacks suppressed [ 188.222372][ T8563] netlink: 'syz.3.802': attribute type 20 has an invalid length. [ 188.250967][ T8563] netlink: 'syz.3.802': attribute type 21 has an invalid length. [ 188.271443][ T8563] netlink: 'syz.3.802': attribute type 23 has an invalid length. [ 188.280634][ T8563] netlink: 'syz.3.802': attribute type 25 has an invalid length. [ 188.299071][ T8563] netlink: 'syz.3.802': attribute type 27 has an invalid length. [ 188.308063][ T8568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.804'. [ 188.317422][ T8568] : renamed from caif0 [ 188.321193][ T8563] netlink: 'syz.3.802': attribute type 28 has an invalid length. [ 188.332014][ T8568] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 188.339178][ T8563] netlink: 'syz.3.802': attribute type 29 has an invalid length. [ 188.365043][ T8565] netlink: 'syz.0.803': attribute type 5 has an invalid length. [ 188.398314][ T8563] netlink: 'syz.3.802': attribute type 30 has an invalid length. [ 190.309185][ T8615] netlink: 'syz.1.815': attribute type 10 has an invalid length. [ 190.856644][ T8615] team0: Device gre0 is of different type [ 191.022543][ T8617] hsr_slave_1 (unregistering): left promiscuous mode [ 191.262663][ T8643] delete_channel: no stack [ 191.407891][ T8648] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.821'. [ 192.240810][ T8671] vcan0: entered allmulticast mode [ 192.427034][ T8678] veth0_macvtap: left promiscuous mode [ 193.126800][ T8704] syzkaller0: entered promiscuous mode [ 193.132528][ T8704] syzkaller0: entered allmulticast mode [ 193.168251][ T8710] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.839'. [ 193.475937][ T8717] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 194.180664][ T8713] delete_channel: no stack [ 194.399453][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422163][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.380010][ T8714] validate_nla: 6 callbacks suppressed [ 195.380021][ T8714] netlink: 'syz.3.843': attribute type 39 has an invalid length. [ 195.393915][ T8714] veth1_vlan: left allmulticast mode [ 195.420543][ T8714] bond0: (slave macvlan0): Releasing backup interface [ 195.437341][ T8725] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 195.462779][ T8725] team0: Port device wlan1 removed [ 196.468325][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 196.469681][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 196.475323][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 196.480623][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 198.521322][ T8800] netlink: 132 bytes leftover after parsing attributes in process `syz.3.864'. [ 201.558626][ T8832] netlink: 'syz.1.874': attribute type 21 has an invalid length. [ 201.571203][ T8832] netlink: 'syz.1.874': attribute type 6 has an invalid length. [ 201.580531][ T8832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.874'. [ 201.703930][ T8830] sit0: entered allmulticast mode [ 201.770916][ T8839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.876'. [ 201.826328][ T8836] sit0: entered promiscuous mode [ 201.882578][ T8839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.876'. [ 201.917049][ T8839] netlink: 13 bytes leftover after parsing attributes in process `syz.1.876'. [ 202.318101][ T8857] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 202.326806][ T8857] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.880'. [ 203.794031][ T8904] raw_sendmsg: syz.2.904 forgot to set AF_INET. Fix it! [ 207.567699][ T8995] syzkaller0: entered promiscuous mode [ 207.573452][ T8995] syzkaller0: entered allmulticast mode [ 207.651768][ T9016] netlink: 14 bytes leftover after parsing attributes in process `syz.3.951'. [ 207.811304][ T9016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.843832][ T9016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.880295][ T9016] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 207.913680][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.935461][ T9016] bond0 (unregistering): Released all slaves [ 208.053167][ T9027] netlink: 'syz.2.955': attribute type 3 has an invalid length. [ 208.061422][ T9027] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.955'. [ 209.599926][ T9045] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 209.640674][ T9045] team0: Device hsr_slave_0 failed to register rx_handler [ 210.056166][ T9058] netlink: 'syz.1.965': attribute type 10 has an invalid length. [ 210.643765][ T9083] sit0: left promiscuous mode [ 213.855623][ T9190] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.998'. [ 214.242599][ T9209] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1004'. [ 214.356613][ T9219] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 214.387178][ T9219] team0: Device hsr_slave_0 failed to register rx_handler [ 214.560140][ T9228] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1010'. [ 214.584245][ T9228] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1010'. [ 214.593737][ T9228] tc_dump_action: action bad kind [ 214.675528][ T9230] netlink: 'syz.1.1011': attribute type 3 has an invalid length. [ 214.683877][ T9230] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1011'. [ 216.143588][ T9278] À: port 1(vlan0) entered blocking state [ 216.154486][ T9278] À: port 1(vlan0) entered disabled state [ 216.160587][ T9278] vlan0: entered allmulticast mode [ 216.169024][ T9278] veth0_vlan: entered allmulticast mode [ 216.183880][ T9278] vlan0: entered promiscuous mode [ 216.244062][ T9280] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1024'. [ 216.303716][ T9280] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 216.318765][ T9280] CPU: 1 PID: 9280 Comm: syz.1.1024 Not tainted syzkaller #0 [ 216.326196][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.336287][ T9280] Call Trace: [ 216.339587][ T9280] [ 216.342539][ T9280] dump_stack_lvl+0x18c/0x250 [ 216.347260][ T9280] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.353444][ T9280] ? show_regs_print_info+0x20/0x20 [ 216.358673][ T9280] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.364889][ T9280] sysfs_warn_dup+0x8e/0xa0 [ 216.369428][ T9280] sysfs_do_create_link_sd+0xc0/0x110 [ 216.374841][ T9280] device_add_class_symlinks+0x1cf/0x240 [ 216.380507][ T9280] device_add+0x4f9/0xc40 [ 216.384870][ T9280] wiphy_register+0x1d99/0x2ac0 [ 216.389748][ T9280] ? lock_chain_count+0x20/0x20 [ 216.394642][ T9280] ? cfg80211_event_work+0x40/0x40 [ 216.399789][ T9280] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 216.405889][ T9280] ieee80211_register_hw+0x2dd8/0x3b30 [ 216.411400][ T9280] ? ieee80211_register_hw+0xfb1/0x3b30 [ 216.416985][ T9280] ? ieee80211_tasklet_handler+0x20/0x20 [ 216.422644][ T9280] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 216.428579][ T9280] ? __debug_object_init+0xec/0x450 [ 216.433816][ T9280] ? __asan_memset+0x22/0x40 [ 216.438437][ T9280] ? __hrtimer_init+0x189/0x270 [ 216.443335][ T9280] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 216.449108][ T9280] ? mac80211_hwsim_free+0x220/0x220 [ 216.454419][ T9280] ? rcu_is_watching+0x15/0xb0 [ 216.459218][ T9280] ? kstrndup+0xbd/0x140 [ 216.463501][ T9280] hwsim_new_radio_nl+0xdad/0x1a70 [ 216.468652][ T9280] ? __nla_validate+0x50/0x50 [ 216.473390][ T9280] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 216.479760][ T9280] ? __nla_parse+0x40/0x50 [ 216.484213][ T9280] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 216.490581][ T9280] genl_family_rcv_msg_doit+0x21a/0x310 [ 216.496168][ T9280] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 216.502104][ T9280] ? bpf_lsm_capable+0x9/0x10 [ 216.506813][ T9280] ? security_capable+0x89/0xb0 [ 216.511699][ T9280] genl_rcv_msg+0x611/0x7a0 [ 216.516235][ T9280] ? genl_bind+0x360/0x360 [ 216.520663][ T9280] ? perf_trace_lock+0xfc/0x3b0 [ 216.525517][ T9280] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 216.531872][ T9280] ? perf_trace_lock+0xfc/0x3b0 [ 216.536767][ T9280] netlink_rcv_skb+0x235/0x4c0 [ 216.541562][ T9280] ? genl_bind+0x360/0x360 [ 216.546009][ T9280] ? netlink_ack+0x1160/0x1160 [ 216.550818][ T9280] ? __lock_acquire+0x7d80/0x7d80 [ 216.555872][ T9280] ? net_generic+0x1e/0x240 [ 216.560415][ T9280] ? down_read+0x1ac/0x2e0 [ 216.564861][ T9280] genl_rcv+0x28/0x40 [ 216.568873][ T9280] netlink_unicast+0x7b1/0x930 [ 216.573692][ T9280] netlink_sendmsg+0x8d0/0xbf0 [ 216.578496][ T9280] ? netlink_getsockopt+0x590/0x590 [ 216.583721][ T9280] ? apparmor_socket_sendmsg+0x8e/0x330 [ 216.589291][ T9280] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 216.594598][ T9280] ? security_socket_sendmsg+0x80/0xa0 [ 216.600071][ T9280] ? netlink_getsockopt+0x590/0x590 [ 216.605298][ T9280] ____sys_sendmsg+0x61b/0x980 [ 216.610097][ T9280] ? __asan_memset+0x22/0x40 [ 216.614717][ T9280] ? __sys_sendmsg_sock+0x30/0x30 [ 216.619766][ T9280] ? __import_iovec+0x5f2/0x850 [ 216.624661][ T9280] ? import_iovec+0x73/0xa0 [ 216.629204][ T9280] ___sys_sendmsg+0x2a6/0x360 [ 216.633919][ T9280] ? __sys_sendmsg+0x2b0/0x2b0 [ 216.638754][ T9280] __se_sys_sendmsg+0x1d0/0x2c0 [ 216.643606][ T9280] ? __x64_sys_sendmsg+0x80/0x80 [ 216.648553][ T9280] ? syscall_enter_from_user_mode+0x2e/0x80 [ 216.654451][ T9280] do_syscall_64+0x55/0xb0 [ 216.658859][ T9280] ? clear_bhb_loop+0x40/0x90 [ 216.663533][ T9280] ? clear_bhb_loop+0x40/0x90 [ 216.668207][ T9280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.674113][ T9280] RIP: 0033:0x7f76f6d9e0d9 [ 216.678537][ T9280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.698140][ T9280] RSP: 002b:00007f76f7c31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.706551][ T9280] RAX: ffffffffffffffda RBX: 00007f76f7025fa0 RCX: 00007f76f6d9e0d9 [ 216.714522][ T9280] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 216.722485][ T9280] RBP: 00007f76f6e35024 R08: 0000000000000000 R09: 0000000000000000 [ 216.730450][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.738415][ T9280] R13: 00007f76f7026038 R14: 00007f76f7025fa0 R15: 00007ffea36e2308 [ 216.746396][ T9280] [ 217.716843][ T9319] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1035'. [ 217.738868][ T9319] ksmbd: Unknown IPC event: 0, ignore. [ 218.047599][ T9333] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1042'. [ 218.064542][ T9332] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1041'. [ 218.079124][ T9332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.332441][ T9337] netlink: 'syz.0.1044': attribute type 39 has an invalid length. [ 220.333647][ T9362] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1053'. [ 220.370575][ T9364] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1054'. [ 220.400862][ T9364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.705302][ T9367] syzkaller0: entered promiscuous mode [ 220.711025][ T9367] syzkaller0: entered allmulticast mode [ 220.765360][ T9367] netlink: 'syz.3.1055': attribute type 21 has an invalid length. [ 222.868727][ T9385] netlink: 'syz.0.1060': attribute type 16 has an invalid length. [ 222.877259][ T9385] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1060'. [ 222.893271][ T9389] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 222.899452][ T9389] dvmrp1: linktype set to 768 [ 223.217542][ T9406] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1065'. [ 223.640070][ T9415] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1069'. [ 224.967027][ T9451] syzkaller0: entered promiscuous mode [ 224.972553][ T9451] syzkaller0: entered allmulticast mode [ 225.005553][ T9457] FAULT_INJECTION: forcing a failure. [ 225.005553][ T9457] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 225.023671][ T9457] CPU: 0 PID: 9457 Comm: syz.0.1083 Not tainted syzkaller #0 [ 225.031089][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.041250][ T9457] Call Trace: [ 225.044544][ T9457] [ 225.047485][ T9457] dump_stack_lvl+0x18c/0x250 [ 225.052188][ T9457] ? show_regs_print_info+0x20/0x20 [ 225.057403][ T9457] ? load_image+0x420/0x420 [ 225.061929][ T9457] ? __might_fault+0xaa/0x120 [ 225.066620][ T9457] ? __lock_acquire+0x7d80/0x7d80 [ 225.071662][ T9457] should_fail_ex+0x394/0x4c0 [ 225.076374][ T9457] _copy_from_user+0x2f/0xe0 [ 225.080980][ T9457] __sys_bpf+0x23e/0x890 [ 225.085237][ T9457] ? bpf_link_show_fdinfo+0x390/0x390 [ 225.090642][ T9457] ? lock_chain_count+0x20/0x20 [ 225.095522][ T9457] __x64_sys_bpf+0x7c/0x90 [ 225.099964][ T9457] do_syscall_64+0x55/0xb0 [ 225.104400][ T9457] ? clear_bhb_loop+0x40/0x90 [ 225.109189][ T9457] ? clear_bhb_loop+0x40/0x90 [ 225.113895][ T9457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.119815][ T9457] RIP: 0033:0x7fa85859e0d9 [ 225.124243][ T9457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.143952][ T9457] RSP: 002b:00007fa859502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.152389][ T9457] RAX: ffffffffffffffda RBX: 00007fa858825fa0 RCX: 00007fa85859e0d9 [ 225.160378][ T9457] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 225.168368][ T9457] RBP: 00007fa859502090 R08: 0000000000000000 R09: 0000000000000000 [ 225.176357][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.184346][ T9457] R13: 00007fa858826038 R14: 00007fa858825fa0 R15: 00007ffde10a93a8 [ 225.192349][ T9457] [ 227.280757][ T9473] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 227.290363][ T9473] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1087'. [ 227.314911][ T9473] hsr0: entered promiscuous mode [ 227.325091][ T9473] bridge0: port 2(hsr0) entered blocking state [ 227.334858][ T9473] bridge0: port 2(hsr0) entered disabled state [ 227.343481][ T9473] hsr0: entered allmulticast mode [ 227.370718][ T9473] hsr_slave_0: entered allmulticast mode [ 227.380547][ T9473] hsr_slave_1: entered allmulticast mode [ 227.448076][ T9473] bridge0: port 2(hsr0) entered blocking state [ 227.455628][ T9473] bridge0: port 2(hsr0) entered forwarding state [ 227.685438][ T9494] FAULT_INJECTION: forcing a failure. [ 227.685438][ T9494] name failslab, interval 1, probability 0, space 0, times 1 [ 227.700700][ T9494] CPU: 0 PID: 9494 Comm: syz.2.1094 Not tainted syzkaller #0 [ 227.708122][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.718195][ T9494] Call Trace: [ 227.721494][ T9494] [ 227.724437][ T9494] dump_stack_lvl+0x18c/0x250 [ 227.729138][ T9494] ? show_regs_print_info+0x20/0x20 [ 227.734355][ T9494] ? load_image+0x420/0x420 [ 227.738885][ T9494] ? __might_sleep+0xe0/0xe0 [ 227.743496][ T9494] ? __lock_acquire+0x7d80/0x7d80 [ 227.748547][ T9494] should_fail_ex+0x394/0x4c0 [ 227.753255][ T9494] should_failslab+0x9/0x20 [ 227.757783][ T9494] slab_pre_alloc_hook+0x59/0x300 [ 227.762835][ T9494] ? __get_vm_area_node+0x125/0x370 [ 227.768056][ T9494] __kmem_cache_alloc_node+0x53/0x250 [ 227.773460][ T9494] ? __get_vm_area_node+0x125/0x370 [ 227.778688][ T9494] kmalloc_node_trace+0x26/0xe0 [ 227.783558][ T9494] __get_vm_area_node+0x125/0x370 [ 227.788583][ T9494] __vmalloc_node_range+0x36f/0x1320 [ 227.793864][ T9494] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 227.799409][ T9494] ? mark_lock+0x94/0x320 [ 227.803751][ T9494] ? __lock_acquire+0x1336/0x7d80 [ 227.808780][ T9494] ? perf_trace_preemptirq_template+0xac/0x330 [ 227.814957][ T9494] ? irqentry_enter+0x37/0x50 [ 227.819641][ T9494] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 227.825629][ T9494] ? free_vm_area+0x50/0x50 [ 227.830124][ T9494] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.836288][ T9494] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 227.841851][ T9494] __vmalloc+0x7a/0x90 [ 227.845915][ T9494] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 227.851448][ T9494] bpf_prog_alloc_no_stats+0x46/0x430 [ 227.856848][ T9494] bpf_prog_alloc+0x3d/0x1a0 [ 227.861451][ T9494] bpf_prog_load+0x6b2/0x1610 [ 227.866125][ T9494] ? map_freeze+0x420/0x420 [ 227.870634][ T9494] ? __might_fault+0xaa/0x120 [ 227.875310][ T9494] ? __lock_acquire+0x7d80/0x7d80 [ 227.880321][ T9494] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 227.886558][ T9494] ? __might_fault+0xaa/0x120 [ 227.891252][ T9494] ? __might_fault+0xc6/0x120 [ 227.895925][ T9494] ? __might_fault+0xaa/0x120 [ 227.900598][ T9494] ? bpf_lsm_bpf+0x9/0x10 [ 227.904945][ T9494] ? security_bpf+0x7e/0xa0 [ 227.909464][ T9494] __sys_bpf+0x5ba/0x890 [ 227.913712][ T9494] ? read_tsc+0x9/0x20 [ 227.917771][ T9494] ? bpf_link_show_fdinfo+0x390/0x390 [ 227.923137][ T9494] ? lock_chain_count+0x20/0x20 [ 227.927982][ T9494] ? syscall_enter_from_user_mode+0x20/0x80 [ 227.933879][ T9494] __x64_sys_bpf+0x7c/0x90 [ 227.938381][ T9494] do_syscall_64+0x55/0xb0 [ 227.942789][ T9494] ? clear_bhb_loop+0x40/0x90 [ 227.947454][ T9494] ? clear_bhb_loop+0x40/0x90 [ 227.952117][ T9494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.958008][ T9494] RIP: 0033:0x7fb4d799e0d9 [ 227.962426][ T9494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.982050][ T9494] RSP: 002b:00007fb4d881e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.990454][ T9494] RAX: ffffffffffffffda RBX: 00007fb4d7c25fa0 RCX: 00007fb4d799e0d9 [ 227.998411][ T9494] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 228.006377][ T9494] RBP: 00007fb4d881e090 R08: 0000000000000000 R09: 0000000000000000 [ 228.014349][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.022314][ T9494] R13: 00007fb4d7c26038 R14: 00007fb4d7c25fa0 R15: 00007ffc17ee76e8 [ 228.030289][ T9494] [ 228.035253][ T9494] syz.2.1094: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 228.052223][ T9494] CPU: 0 PID: 9494 Comm: syz.2.1094 Not tainted syzkaller #0 [ 228.059597][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.069646][ T9494] Call Trace: [ 228.072916][ T9494] [ 228.075838][ T9494] dump_stack_lvl+0x18c/0x250 [ 228.080514][ T9494] ? show_regs_print_info+0x20/0x20 [ 228.085727][ T9494] ? load_image+0x420/0x420 [ 228.090228][ T9494] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 228.096635][ T9494] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 228.103125][ T9494] warn_alloc+0x246/0x340 [ 228.107455][ T9494] ? __get_vm_area_node+0x125/0x370 [ 228.112654][ T9494] ? zone_watermark_ok_safe+0x230/0x230 [ 228.118186][ T9494] ? rcu_is_watching+0x15/0xb0 [ 228.122946][ T9494] ? __get_vm_area_node+0x356/0x370 [ 228.128140][ T9494] __vmalloc_node_range+0x394/0x1320 [ 228.133418][ T9494] ? mark_lock+0x94/0x320 [ 228.137741][ T9494] ? __lock_acquire+0x1336/0x7d80 [ 228.142758][ T9494] ? perf_trace_preemptirq_template+0xac/0x330 [ 228.148905][ T9494] ? irqentry_enter+0x37/0x50 [ 228.153578][ T9494] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 228.159550][ T9494] ? free_vm_area+0x50/0x50 [ 228.164055][ T9494] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 228.170224][ T9494] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 228.175775][ T9494] __vmalloc+0x7a/0x90 [ 228.179837][ T9494] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 228.185375][ T9494] bpf_prog_alloc_no_stats+0x46/0x430 [ 228.190738][ T9494] bpf_prog_alloc+0x3d/0x1a0 [ 228.195319][ T9494] bpf_prog_load+0x6b2/0x1610 [ 228.199993][ T9494] ? map_freeze+0x420/0x420 [ 228.204493][ T9494] ? __might_fault+0xaa/0x120 [ 228.209161][ T9494] ? __lock_acquire+0x7d80/0x7d80 [ 228.214187][ T9494] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 228.220427][ T9494] ? __might_fault+0xaa/0x120 [ 228.225101][ T9494] ? __might_fault+0xc6/0x120 [ 228.229766][ T9494] ? __might_fault+0xaa/0x120 [ 228.234430][ T9494] ? bpf_lsm_bpf+0x9/0x10 [ 228.238754][ T9494] ? security_bpf+0x7e/0xa0 [ 228.243249][ T9494] __sys_bpf+0x5ba/0x890 [ 228.247501][ T9494] ? read_tsc+0x9/0x20 [ 228.251566][ T9494] ? bpf_link_show_fdinfo+0x390/0x390 [ 228.256943][ T9494] ? lock_chain_count+0x20/0x20 [ 228.261784][ T9494] ? syscall_enter_from_user_mode+0x20/0x80 [ 228.268195][ T9494] __x64_sys_bpf+0x7c/0x90 [ 228.272600][ T9494] do_syscall_64+0x55/0xb0 [ 228.277007][ T9494] ? clear_bhb_loop+0x40/0x90 [ 228.281676][ T9494] ? clear_bhb_loop+0x40/0x90 [ 228.286341][ T9494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.292224][ T9494] RIP: 0033:0x7fb4d799e0d9 [ 228.296631][ T9494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.316228][ T9494] RSP: 002b:00007fb4d881e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.324633][ T9494] RAX: ffffffffffffffda RBX: 00007fb4d7c25fa0 RCX: 00007fb4d799e0d9 [ 228.332598][ T9494] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000005 [ 228.340559][ T9494] RBP: 00007fb4d881e090 R08: 0000000000000000 R09: 0000000000000000 [ 228.348519][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.356481][ T9494] R13: 00007fb4d7c26038 R14: 00007fb4d7c25fa0 R15: 00007ffc17ee76e8 [ 228.364455][ T9494] [ 228.385018][ T9494] Mem-Info: [ 228.388312][ T9494] active_anon:5562 inactive_anon:0 isolated_anon:0 [ 228.388312][ T9494] active_file:16894 inactive_file:40011 isolated_file:0 [ 228.388312][ T9494] unevictable:768 dirty:137 writeback:0 [ 228.388312][ T9494] slab_reclaimable:10540 slab_unreclaimable:94565 [ 228.388312][ T9494] mapped:24306 shmem:1361 pagetables:584 [ 228.388312][ T9494] sec_pagetables:0 bounce:0 [ 228.388312][ T9494] kernel_misc_reclaimable:0 [ 228.388312][ T9494] free:1343355 free_pcp:13734 free_cma:0 [ 228.446300][ T9494] Node 0 active_anon:22048kB inactive_anon:0kB active_file:67576kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97224kB dirty:548kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11848kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no [ 228.492207][ T9494] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 228.581754][ T9494] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.660439][ T9494] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 228.676827][ T9494] Node 0 DMA32 free:1465296kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22608kB inactive_anon:0kB active_file:67576kB inactive_file:159024kB unevictable:1536kB writepending:548kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:32572kB local_pcp:17816kB free_cma:0kB [ 228.816614][ T9494] lowmem_reserve[]: 0 0 0 0 0 [ 228.834345][ T9494] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 228.931847][ T9494] lowmem_reserve[]: 0 0 0 0 0 [ 228.954509][ T9494] Node 1 Normal free:3892260kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22144kB local_pcp:11488kB free_cma:0kB [ 229.076380][ T9494] lowmem_reserve[]: 0 0 0 0 0 [ 229.081235][ T9494] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.124244][ T9494] Node 0 DMA32: 2051*4kB (UM) 1407*8kB (UM) 1009*16kB (UM) 806*32kB (UM) 139*64kB (UME) 45*128kB (UME) 67*256kB (M) 29*512kB (UME) 11*1024kB (UME) 7*2048kB (UM) 325*4096kB (UM) = 1464852kB [ 229.184867][ T9494] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.217240][ T9494] Node 1 Normal: 225*4kB (UM) 52*8kB (UME) 42*16kB (UME) 39*32kB (UME) 20*64kB (UE) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3892260kB [ 229.276649][ T9494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.317039][ T9494] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.334330][ T9494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.357141][ T9494] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.376605][ T9494] 58924 total pagecache pages [ 229.388801][ T9494] 0 pages in swap cache [ 229.399059][ T9494] Free swap = 124996kB [ 229.408851][ T9494] Total swap = 124996kB [ 229.419056][ T9494] 2097051 pages RAM [ 229.428815][ T9494] 0 pages HighMem/MovableOnly [ 229.440214][ T9494] 416955 pages reserved [ 229.467791][ T9494] 0 pages cma reserved [ 229.499613][ T9510] syzkaller0: entered promiscuous mode [ 229.545369][ T9510] syzkaller0: entered allmulticast mode [ 233.095149][ T9524] netlink: 'syz.3.1103': attribute type 10 has an invalid length. [ 233.103478][ T9524] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1103'. [ 233.113017][ T9524] hsr0: entered promiscuous mode [ 233.119998][ T9524] bridge0: port 1(hsr0) entered blocking state [ 233.126618][ T9524] bridge0: port 1(hsr0) entered disabled state [ 233.133064][ T9524] hsr0: entered allmulticast mode [ 233.138974][ T9524] hsr_slave_0: entered allmulticast mode [ 233.144821][ T9524] hsr_slave_1: entered allmulticast mode [ 234.033270][ T9561] netlink: 'syz.3.1117': attribute type 4 has an invalid length. [ 234.197613][ T9561] syzkaller0: entered promiscuous mode [ 234.214288][ T9561] syzkaller0: entered allmulticast mode [ 234.244494][ T9563] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 234.263268][ T9563] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1116'. [ 234.274831][ T9563] hsr0: entered promiscuous mode [ 234.285352][ T9563] bridge0: port 3(hsr0) entered blocking state [ 234.301615][ T9563] bridge0: port 3(hsr0) entered disabled state [ 234.311038][ T9563] hsr0: entered allmulticast mode [ 234.322812][ T9563] hsr_slave_0: entered allmulticast mode [ 234.329510][ T9563] hsr_slave_1: entered allmulticast mode [ 234.347150][ T9563] bridge0: port 3(hsr0) entered blocking state [ 234.353662][ T9563] bridge0: port 3(hsr0) entered forwarding state [ 234.987250][ T9574] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1118'. [ 236.269411][ T9574] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1118'. [ 236.278857][ T9580] netlink: 'syz.2.1118': attribute type 10 has an invalid length. [ 236.292616][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1118'. [ 236.308214][ T9580] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 236.324229][ T9580] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.390529][ T9580] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 236.485939][ T9595] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 236.504377][ T9595] netlink: 'syz.3.1125': attribute type 3 has an invalid length. [ 236.529486][ T9595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1125'. [ 236.788344][ T9601] netlink: 'syz.2.1128': attribute type 10 has an invalid length. [ 236.814933][ T9601] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1128'. [ 237.017337][ T9612] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1132'. [ 239.824578][ T9636] tap0: tun_chr_ioctl cmd 1074025680 [ 239.838796][ T9636] tap0: tun_chr_ioctl cmd 1074025677 [ 239.859008][ T9636] tap0: linktype set to 5 [ 240.005240][ T9641] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1138'. [ 240.018043][ T9641] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1138'. [ 240.045479][ T9634] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1138'. [ 240.094464][ T9641] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1138'. [ 240.136606][ T9634] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 240.166655][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 240.206933][ T9634] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 240.222256][ T9634] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.274429][ T9634] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 240.394814][ T9657] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1147'. [ 241.063816][ T9682] FAULT_INJECTION: forcing a failure. [ 241.063816][ T9682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.094305][ T9682] CPU: 1 PID: 9682 Comm: syz.0.1155 Not tainted syzkaller #0 [ 241.101752][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.111833][ T9682] Call Trace: [ 241.115112][ T9682] [ 241.118037][ T9682] dump_stack_lvl+0x18c/0x250 [ 241.122719][ T9682] ? show_regs_print_info+0x20/0x20 [ 241.127918][ T9682] ? load_image+0x420/0x420 [ 241.132424][ T9682] ? __might_fault+0xaa/0x120 [ 241.137097][ T9682] ? __lock_acquire+0x7d80/0x7d80 [ 241.142119][ T9682] should_fail_ex+0x394/0x4c0 [ 241.146802][ T9682] _copy_from_user+0x2f/0xe0 [ 241.151388][ T9682] __sys_bpf+0x23e/0x890 [ 241.155630][ T9682] ? bpf_link_show_fdinfo+0x390/0x390 [ 241.161005][ T9682] ? lock_chain_count+0x20/0x20 [ 241.165850][ T9682] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 241.171831][ T9682] __x64_sys_bpf+0x7c/0x90 [ 241.176242][ T9682] do_syscall_64+0x55/0xb0 [ 241.180657][ T9682] ? clear_bhb_loop+0x40/0x90 [ 241.185329][ T9682] ? clear_bhb_loop+0x40/0x90 [ 241.190091][ T9682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.195980][ T9682] RIP: 0033:0x7fa85859e0d9 [ 241.200390][ T9682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.219988][ T9682] RSP: 002b:00007fa859502028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.228414][ T9682] RAX: ffffffffffffffda RBX: 00007fa858825fa0 RCX: 00007fa85859e0d9 [ 241.236392][ T9682] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 241.244368][ T9682] RBP: 00007fa859502090 R08: 0000000000000000 R09: 0000000000000000 [ 241.252334][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.260298][ T9682] R13: 00007fa858826038 R14: 00007fa858825fa0 R15: 00007ffde10a93a8 [ 241.268276][ T9682] [ 241.943609][ T9697] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1157'. [ 241.961654][ T9697] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1157'. [ 242.009406][ T9688] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1157'. [ 242.036986][ T9704] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1157'. [ 242.093683][ T9688] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 242.131150][ T9688] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 242.148161][ T9688] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.179747][ T9688] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 242.257757][ T9715] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 242.290863][ T9715] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.308304][ T9715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.326432][ T9715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.336157][ T9715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.371986][ T9715] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.430265][ T9715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.442198][ T9715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.455652][ T9715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.494010][ T9715] team0: Port device geneve1 added [ 242.611071][ T9721] netlink: 'syz.0.1175': attribute type 10 has an invalid length. [ 242.697304][ T9724] FAULT_INJECTION: forcing a failure. [ 242.697304][ T9724] name failslab, interval 1, probability 0, space 0, times 0 [ 242.700773][ T9721] team0: Port device geneve1 added [ 242.773461][ T9724] CPU: 0 PID: 9724 Comm: syz.1.1169 Not tainted syzkaller #0 [ 242.780901][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.790975][ T9724] Call Trace: [ 242.794255][ T9724] [ 242.797179][ T9724] dump_stack_lvl+0x18c/0x250 [ 242.801855][ T9724] ? show_regs_print_info+0x20/0x20 [ 242.807046][ T9724] ? load_image+0x420/0x420 [ 242.811548][ T9724] ? __might_sleep+0xe0/0xe0 [ 242.816130][ T9724] ? __lock_acquire+0x7d80/0x7d80 [ 242.821172][ T9724] should_fail_ex+0x394/0x4c0 [ 242.825851][ T9724] should_failslab+0x9/0x20 [ 242.830356][ T9724] slab_pre_alloc_hook+0x59/0x300 [ 242.835394][ T9724] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 242.841803][ T9724] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 242.848210][ T9724] __kmem_cache_alloc_node+0x53/0x250 [ 242.853584][ T9724] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 242.859998][ T9724] __kmalloc+0xa7/0x240 [ 242.864179][ T9724] bpf_prog_test_run_flow_dissector+0x259/0x640 [ 242.870420][ T9724] ? xdp_convert_buff_to_md+0x200/0x200 [ 242.875961][ T9724] ? __fget_files+0x28/0x460 [ 242.880547][ T9724] ? __fget_files+0x3fc/0x460 [ 242.885226][ T9724] ? xdp_convert_buff_to_md+0x200/0x200 [ 242.890767][ T9724] bpf_prog_test_run+0x31f/0x390 [ 242.895700][ T9724] __sys_bpf+0x49d/0x890 [ 242.899936][ T9724] ? bpf_link_show_fdinfo+0x390/0x390 [ 242.905309][ T9724] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.911467][ T9724] __x64_sys_bpf+0x7c/0x90 [ 242.915881][ T9724] do_syscall_64+0x55/0xb0 [ 242.920290][ T9724] ? clear_bhb_loop+0x40/0x90 [ 242.924959][ T9724] ? clear_bhb_loop+0x40/0x90 [ 242.929629][ T9724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.935600][ T9724] RIP: 0033:0x7f76f6d9e0d9 [ 242.940043][ T9724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.959643][ T9724] RSP: 002b:00007f76f7c31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.968061][ T9724] RAX: ffffffffffffffda RBX: 00007f76f7025fa0 RCX: 00007f76f6d9e0d9 [ 242.976026][ T9724] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 242.983989][ T9724] RBP: 00007f76f7c31090 R08: 0000000000000000 R09: 0000000000000000 [ 242.991955][ T9724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.999915][ T9724] R13: 00007f76f7026038 R14: 00007f76f7025fa0 R15: 00007ffea36e2308 [ 243.007889][ T9724] [ 243.661456][ T9752] FAULT_INJECTION: forcing a failure. [ 243.661456][ T9752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.677123][ T9752] CPU: 1 PID: 9752 Comm: syz.1.1179 Not tainted syzkaller #0 [ 243.684532][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.694615][ T9752] Call Trace: [ 243.697907][ T9752] [ 243.700854][ T9752] dump_stack_lvl+0x18c/0x250 [ 243.705599][ T9752] ? show_regs_print_info+0x20/0x20 [ 243.710814][ T9752] ? load_image+0x420/0x420 [ 243.715431][ T9752] ? __might_fault+0xaa/0x120 [ 243.720132][ T9752] ? __lock_acquire+0x7d80/0x7d80 [ 243.725181][ T9752] ? __virt_addr_valid+0x10c/0x380 [ 243.730317][ T9752] should_fail_ex+0x394/0x4c0 [ 243.735122][ T9752] _copy_from_user+0x2f/0xe0 [ 243.739747][ T9752] bpf_prog_test_run_flow_dissector+0x281/0x640 [ 243.746019][ T9752] ? xdp_convert_buff_to_md+0x200/0x200 [ 243.751590][ T9752] ? __fget_files+0x28/0x460 [ 243.756200][ T9752] ? __fget_files+0x3fc/0x460 [ 243.760905][ T9752] ? xdp_convert_buff_to_md+0x200/0x200 [ 243.766475][ T9752] bpf_prog_test_run+0x31f/0x390 [ 243.771431][ T9752] __sys_bpf+0x49d/0x890 [ 243.775696][ T9752] ? bpf_link_show_fdinfo+0x390/0x390 [ 243.781100][ T9752] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.787284][ T9752] __x64_sys_bpf+0x7c/0x90 [ 243.791728][ T9752] do_syscall_64+0x55/0xb0 [ 243.796166][ T9752] ? clear_bhb_loop+0x40/0x90 [ 243.800954][ T9752] ? clear_bhb_loop+0x40/0x90 [ 243.805653][ T9752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.811564][ T9752] RIP: 0033:0x7f76f6d9e0d9 [ 243.815992][ T9752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.835620][ T9752] RSP: 002b:00007f76f7c31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.844062][ T9752] RAX: ffffffffffffffda RBX: 00007f76f7025fa0 RCX: 00007f76f6d9e0d9 [ 243.852223][ T9752] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 243.860214][ T9752] RBP: 00007f76f7c31090 R08: 0000000000000000 R09: 0000000000000000 [ 243.868205][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.876191][ T9752] R13: 00007f76f7026038 R14: 00007f76f7025fa0 R15: 00007ffea36e2308 [ 243.884194][ T9752] [ 244.237559][ T9762] netlink: 'syz.3.1182': attribute type 10 has an invalid length. [ 244.250108][ T9758] FAULT_INJECTION: forcing a failure. [ 244.250108][ T9758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.268599][ T9758] CPU: 1 PID: 9758 Comm: syz.1.1189 Not tainted syzkaller #0 [ 244.276008][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.286066][ T9758] Call Trace: [ 244.289347][ T9758] [ 244.292285][ T9758] dump_stack_lvl+0x18c/0x250 [ 244.296963][ T9758] ? show_regs_print_info+0x20/0x20 [ 244.302155][ T9758] ? load_image+0x420/0x420 [ 244.306660][ T9758] ? __might_fault+0xaa/0x120 [ 244.311366][ T9758] ? __lock_acquire+0x7d80/0x7d80 [ 244.316389][ T9758] should_fail_ex+0x394/0x4c0 [ 244.321064][ T9758] _copy_to_user+0x2f/0xa0 [ 244.325477][ T9758] bpf_test_finish+0x19f/0x650 [ 244.330243][ T9758] ? convert_skb_to___skb+0x420/0x420 [ 244.335612][ T9758] ? read_tsc+0x9/0x20 [ 244.339685][ T9758] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 244.345931][ T9758] ? xdp_convert_buff_to_md+0x200/0x200 [ 244.351477][ T9758] ? __fget_files+0x28/0x460 [ 244.356071][ T9758] ? xdp_convert_buff_to_md+0x200/0x200 [ 244.361613][ T9758] bpf_prog_test_run+0x31f/0x390 [ 244.366545][ T9758] __sys_bpf+0x49d/0x890 [ 244.370781][ T9758] ? bpf_link_show_fdinfo+0x390/0x390 [ 244.376157][ T9758] ? lock_chain_count+0x20/0x20 [ 244.381000][ T9758] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 244.386982][ T9758] __x64_sys_bpf+0x7c/0x90 [ 244.391464][ T9758] do_syscall_64+0x55/0xb0 [ 244.395873][ T9758] ? clear_bhb_loop+0x40/0x90 [ 244.400547][ T9758] ? clear_bhb_loop+0x40/0x90 [ 244.405226][ T9758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.411118][ T9758] RIP: 0033:0x7f76f6d9e0d9 [ 244.415529][ T9758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.435127][ T9758] RSP: 002b:00007f76f7c31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.443533][ T9758] RAX: ffffffffffffffda RBX: 00007f76f7025fa0 RCX: 00007f76f6d9e0d9 [ 244.451497][ T9758] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 244.459463][ T9758] RBP: 00007f76f7c31090 R08: 0000000000000000 R09: 0000000000000000 [ 244.467427][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.475388][ T9758] R13: 00007f76f7026038 R14: 00007f76f7025fa0 R15: 00007ffea36e2308 [ 244.483362][ T9758] [ 244.561637][ T9762] team0: Port device geneve1 added [ 244.703552][ T9770] netlink: 'syz.1.1183': attribute type 17 has an invalid length. [ 244.746659][ T9770] netlink: 'syz.1.1183': attribute type 16 has an invalid length. [ 244.952073][ T9778] netlink: 'syz.2.1187': attribute type 21 has an invalid length. [ 245.040292][ T9778] sit0: entered allmulticast mode [ 245.227931][ T5783] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 245.287702][ T9790] FAULT_INJECTION: forcing a failure. [ 245.287702][ T9790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.303102][ T9790] CPU: 0 PID: 9790 Comm: syz.3.1192 Not tainted syzkaller #0 [ 245.310539][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.320644][ T9790] Call Trace: [ 245.323970][ T9790] [ 245.326940][ T9790] dump_stack_lvl+0x18c/0x250 [ 245.331682][ T9790] ? show_regs_print_info+0x20/0x20 [ 245.336936][ T9790] ? load_image+0x420/0x420 [ 245.341514][ T9790] ? __might_fault+0xaa/0x120 [ 245.346250][ T9790] ? __lock_acquire+0x7d80/0x7d80 [ 245.351341][ T9790] should_fail_ex+0x394/0x4c0 [ 245.356092][ T9790] _copy_to_user+0x2f/0xa0 [ 245.360569][ T9790] bpf_test_finish+0x25a/0x650 [ 245.365389][ T9790] ? convert_skb_to___skb+0x420/0x420 [ 245.370780][ T9790] ? read_tsc+0x9/0x20 [ 245.374886][ T9790] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 245.381177][ T9790] ? xdp_convert_buff_to_md+0x200/0x200 [ 245.386748][ T9790] ? __fget_files+0x28/0x460 [ 245.391384][ T9790] ? xdp_convert_buff_to_md+0x200/0x200 [ 245.396948][ T9790] bpf_prog_test_run+0x31f/0x390 [ 245.401907][ T9790] __sys_bpf+0x49d/0x890 [ 245.406169][ T9790] ? bpf_link_show_fdinfo+0x390/0x390 [ 245.411591][ T9790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.417789][ T9790] __x64_sys_bpf+0x7c/0x90 [ 245.422226][ T9790] do_syscall_64+0x55/0xb0 [ 245.426669][ T9790] ? clear_bhb_loop+0x40/0x90 [ 245.431358][ T9790] ? clear_bhb_loop+0x40/0x90 [ 245.436064][ T9790] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.441966][ T9790] RIP: 0033:0x7f9b3b59e0d9 [ 245.446395][ T9790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.466019][ T9790] RSP: 002b:00007f9b3c3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.474449][ T9790] RAX: ffffffffffffffda RBX: 00007f9b3b825fa0 RCX: 00007f9b3b59e0d9 [ 245.482429][ T9790] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 245.490406][ T9790] RBP: 00007f9b3c3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 245.498383][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.506366][ T9790] R13: 00007f9b3b826038 R14: 00007f9b3b825fa0 R15: 00007fff34b67c58 [ 245.514388][ T9790] [ 246.282590][ T9806] __nla_validate_parse: 3 callbacks suppressed [ 246.282605][ T9806] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1199'. [ 246.302354][ T9806] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1199'. [ 246.319574][ T9809] netlink: 'syz.2.1197': attribute type 10 has an invalid length. [ 246.393242][ T9809] team0: Port device geneve1 added [ 246.401066][ T9810] netlink: 'syz.3.1198': attribute type 10 has an invalid length. [ 246.434230][ T9810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1198'. [ 246.463761][ T9810] team0: entered promiscuous mode [ 246.481297][ T9810] team_slave_0: entered promiscuous mode [ 246.487889][ T9810] team_slave_1: entered promiscuous mode [ 246.493969][ T9810] geneve1: entered promiscuous mode [ 246.502223][ T9810] team0: entered allmulticast mode [ 246.511993][ T9810] team_slave_0: entered allmulticast mode [ 246.521494][ T9810] team_slave_1: entered allmulticast mode [ 246.531511][ T9810] geneve1: entered allmulticast mode [ 246.542821][ T9810] bridge0: port 3(team0) entered blocking state [ 246.551905][ T9810] bridge0: port 3(team0) entered disabled state [ 246.795104][ T9836] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1207'. [ 246.832889][ T9828] FAULT_INJECTION: forcing a failure. [ 246.832889][ T9828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.864514][ T9828] CPU: 1 PID: 9828 Comm: syz.1.1203 Not tainted syzkaller #0 [ 246.871953][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.882029][ T9828] Call Trace: [ 246.885334][ T9828] [ 246.888278][ T9828] dump_stack_lvl+0x18c/0x250 [ 246.892981][ T9828] ? show_regs_print_info+0x20/0x20 [ 246.898203][ T9828] ? load_image+0x420/0x420 [ 246.902747][ T9828] ? __might_fault+0xaa/0x120 [ 246.907456][ T9828] ? __lock_acquire+0x7d80/0x7d80 [ 246.912517][ T9828] should_fail_ex+0x394/0x4c0 [ 246.917242][ T9828] _copy_to_user+0x2f/0xa0 [ 246.921691][ T9828] bpf_test_finish+0x4e7/0x650 [ 246.926506][ T9828] ? convert_skb_to___skb+0x420/0x420 [ 246.931899][ T9828] ? read_tsc+0x9/0x20 [ 246.935999][ T9828] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 246.942280][ T9828] ? xdp_convert_buff_to_md+0x200/0x200 [ 246.947852][ T9828] ? __fget_files+0x28/0x460 [ 246.952495][ T9828] ? xdp_convert_buff_to_md+0x200/0x200 [ 246.958048][ T9828] bpf_prog_test_run+0x31f/0x390 [ 246.963011][ T9828] __sys_bpf+0x49d/0x890 [ 246.967271][ T9828] ? bpf_link_show_fdinfo+0x390/0x390 [ 246.972688][ T9828] ? lock_chain_count+0x20/0x20 [ 246.977577][ T9828] __x64_sys_bpf+0x7c/0x90 [ 246.982030][ T9828] do_syscall_64+0x55/0xb0 [ 246.986469][ T9828] ? clear_bhb_loop+0x40/0x90 [ 246.991167][ T9828] ? clear_bhb_loop+0x40/0x90 [ 246.995864][ T9828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.001778][ T9828] RIP: 0033:0x7f76f6d9e0d9 [ 247.006210][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.025842][ T9828] RSP: 002b:00007f76f7c31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.034284][ T9828] RAX: ffffffffffffffda RBX: 00007f76f7025fa0 RCX: 00007f76f6d9e0d9 [ 247.042275][ T9828] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 247.050272][ T9828] RBP: 00007f76f7c31090 R08: 0000000000000000 R09: 0000000000000000 [ 247.058280][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.066273][ T9828] R13: 00007f76f7026038 R14: 00007f76f7025fa0 R15: 00007ffea36e2308 [ 247.074283][ T9828] [ 247.171341][ T9841] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1209'. [ 247.481028][ T9854] netlink: 'syz.1.1213': attribute type 10 has an invalid length. [ 247.496062][ T9854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1213'. [ 247.514272][ T9854] team0: entered promiscuous mode [ 247.521366][ T9854] team_slave_0: entered promiscuous mode [ 247.532159][ T9854] team_slave_1: entered promiscuous mode [ 247.540850][ T9854] geneve1: entered promiscuous mode [ 247.551134][ T9854] team0: entered allmulticast mode [ 247.557179][ T9854] team_slave_0: entered allmulticast mode [ 247.563382][ T9854] team_slave_1: entered allmulticast mode [ 247.574206][ T9854] geneve1: entered allmulticast mode [ 247.582187][ T9854] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.602818][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 248.360710][ T9878] FAULT_INJECTION: forcing a failure. [ 248.360710][ T9878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.376810][ T9878] CPU: 1 PID: 9878 Comm: syz.0.1218 Not tainted syzkaller #0 [ 248.384219][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.394281][ T9878] Call Trace: [ 248.397596][ T9878] [ 248.400531][ T9878] dump_stack_lvl+0x18c/0x250 [ 248.405208][ T9878] ? show_regs_print_info+0x20/0x20 [ 248.410400][ T9878] ? load_image+0x420/0x420 [ 248.414913][ T9878] ? __lock_acquire+0x7d80/0x7d80 [ 248.419929][ T9878] ? lockdep_hardirqs_on+0x98/0x150 [ 248.425132][ T9878] should_fail_ex+0x394/0x4c0 [ 248.429810][ T9878] _copy_to_user+0x2f/0xa0 [ 248.434231][ T9878] simple_read_from_buffer+0xe7/0x150 [ 248.439606][ T9878] proc_fail_nth_read+0x1e8/0x260 [ 248.444629][ T9878] ? proc_fault_inject_write+0x360/0x360 [ 248.450262][ T9878] ? proc_fault_inject_write+0x360/0x360 [ 248.455890][ T9878] vfs_read+0x298/0x990 [ 248.460047][ T9878] ? kernel_read+0x1e0/0x1e0 [ 248.464632][ T9878] ? __fget_files+0x28/0x460 [ 248.469229][ T9878] ? __fget_files+0x3fc/0x460 [ 248.473905][ T9878] ? __fdget_pos+0x2a3/0x330 [ 248.478490][ T9878] ? ksys_read+0x74/0x260 [ 248.482819][ T9878] ksys_read+0x151/0x260 [ 248.487074][ T9878] ? vfs_write+0x9a0/0x9a0 [ 248.491486][ T9878] ? lockdep_hardirqs_on+0x98/0x150 [ 248.496689][ T9878] do_syscall_64+0x55/0xb0 [ 248.501097][ T9878] ? clear_bhb_loop+0x40/0x90 [ 248.505769][ T9878] ? clear_bhb_loop+0x40/0x90 [ 248.510439][ T9878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.516324][ T9878] RIP: 0033:0x7fa85855e90e [ 248.520731][ T9878] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 248.540331][ T9878] RSP: 002b:00007fa859501fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.548739][ T9878] RAX: ffffffffffffffda RBX: 00007fa8595026c0 RCX: 00007fa85855e90e [ 248.556703][ T9878] RDX: 000000000000000f RSI: 00007fa8595020a0 RDI: 0000000000000008 [ 248.564679][ T9878] RBP: 00007fa859502090 R08: 0000000000000000 R09: 0000000000000000 [ 248.572639][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.580600][ T9878] R13: 00007fa858826038 R14: 00007fa858825fa0 R15: 00007ffde10a93a8 [ 248.588581][ T9878] [ 248.910567][ T9894] netlink: 'syz.3.1223': attribute type 4 has an invalid length. [ 249.104401][ T9900] netlink: 'syz.0.1224': attribute type 10 has an invalid length. [ 249.122512][ T9900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1224'. [ 249.136668][ T9900] team0: entered promiscuous mode [ 249.153107][ T9900] team_slave_1: entered promiscuous mode [ 249.174533][ T9900] geneve1: entered promiscuous mode [ 249.183288][ T9900] team0: entered allmulticast mode [ 249.193180][ T9900] team_slave_1: entered allmulticast mode [ 249.204264][ T9900] geneve1: entered allmulticast mode [ 249.213130][ T9900] bridge0: port 3(team0) entered blocking state [ 249.237294][ T9900] bridge0: port 3(team0) entered disabled state [ 249.258195][ T9900] bridge0: port 3(team0) entered blocking state [ 249.264672][ T9900] bridge0: port 3(team0) entered forwarding state [ 249.712021][ T9916] syzkaller0: entered promiscuous mode [ 249.751856][ T9916] syzkaller0: entered allmulticast mode [ 252.122596][ T9923] netlink: 'syz.1.1229': attribute type 11 has an invalid length. [ 252.130801][ T9923] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1229'. [ 252.450013][ T9939] netlink: 'syz.1.1235': attribute type 2 has an invalid length. [ 252.463816][ T9939] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1235'. [ 253.282136][ T9959] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 253.305212][ T9959] syzkaller0: linktype set to 0 [ 253.510853][ T9967] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 253.524239][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1236'. [ 253.533332][ T9967] team0: entered promiscuous mode [ 253.540046][ T9967] C: entered promiscuous mode [ 253.546280][ T9967] team_slave_1: entered promiscuous mode [ 253.552112][ T9967] geneve1: entered promiscuous mode [ 253.557728][ T9967] team0: entered allmulticast mode [ 253.565677][ T9967] C: entered allmulticast mode [ 253.585761][ T9967] team_slave_1: entered allmulticast mode [ 253.591551][ T9967] geneve1: entered allmulticast mode [ 253.624876][ T9967] bridge0: port 4(team0) entered blocking state [ 253.631295][ T9967] bridge0: port 4(team0) entered disabled state [ 253.652984][ T9967] bridge0: port 4(team0) entered blocking state [ 253.659443][ T9967] bridge0: port 4(team0) entered forwarding state [ 253.699126][ T9977] netlink: 'syz.1.1249': attribute type 21 has an invalid length. [ 253.709021][ T9977] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1249'. [ 253.718733][ T9968] netlink: 'syz.3.1246': attribute type 28 has an invalid length. [ 253.740848][ T9968] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1246'. [ 254.606643][T10007] netlink: 'syz.1.1256': attribute type 21 has an invalid length. [ 254.633792][T10007] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1256'. [ 255.840467][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.848302][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.269644][T10032] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1267'. [ 258.292662][T10035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1265'. [ 258.618263][T10049] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1271'. [ 258.629557][T10049] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.1271'. [ 258.870626][T10054] netlink: 'syz.2.1274': attribute type 1 has an invalid length. [ 258.890029][T10054] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1274'. [ 260.004929][T10094] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1284'. [ 260.077671][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.197178][T10094] bridge_slave_0 (unregistering): left allmulticast mode [ 260.205814][T10094] bridge_slave_0 (unregistering): left promiscuous mode [ 260.213193][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.392861][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 261.410104][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 261.423401][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 261.437771][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1300'. [ 261.657847][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.777593][T10140] bridge_slave_0 (unregistering): left allmulticast mode [ 261.785828][T10140] bridge_slave_0 (unregistering): left promiscuous mode [ 261.793783][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.683378][T10173] netlink: zone id is out of range [ 262.709160][T10173] netlink: zone id is out of range [ 262.724292][T10173] netlink: zone id is out of range [ 262.756160][T10173] netlink: zone id is out of range [ 262.761397][T10173] netlink: zone id is out of range [ 262.788172][T10173] netlink: zone id is out of range [ 262.800107][T10173] netlink: zone id is out of range [ 262.817068][T10173] netlink: zone id is out of range [ 262.822331][T10173] netlink: zone id is out of range [ 262.873790][T10173] netlink: zone id is out of range [ 263.587091][T10200] netlink: 'syz.3.1322': attribute type 3 has an invalid length. [ 263.616178][T10200] __nla_validate_parse: 2 callbacks suppressed [ 263.616193][T10200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1322'. [ 263.875761][T10210] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1326'. [ 264.004460][T10182] delete_channel: no stack [ 264.043632][T10215] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1328'. [ 264.846382][T10223] netlink: 'syz.1.1330': attribute type 21 has an invalid length. [ 264.865178][T10223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1330'. [ 264.884534][T10223] netlink: 'syz.1.1330': attribute type 4 has an invalid length. [ 264.924511][T10223] netlink: 'syz.1.1330': attribute type 5 has an invalid length. [ 264.932291][T10223] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1330'. [ 265.693278][T10256] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1340'. [ 265.703143][T10258] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1340'. [ 272.516826][T10313] sit0: left promiscuous mode [ 272.614327][T10314] sit0: entered promiscuous mode [ 272.845416][T10320] bridge0: port 4(batadv0) entered blocking state [ 272.865132][T10320] bridge0: port 4(batadv0) entered disabled state [ 272.872236][T10320] batadv0: entered allmulticast mode [ 272.898674][T10325] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1358'. [ 272.948527][T10320] batadv0: entered promiscuous mode [ 273.323904][ T6915] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 273.333951][ T6915] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 273.438076][T10330] netlink: 'syz.3.1362': attribute type 9 has an invalid length. [ 273.452086][T10330] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1362'. [ 274.179304][T10351] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1368'. [ 274.334488][T10351] netlink: 'syz.3.1368': attribute type 21 has an invalid length. [ 274.342574][T10351] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1368'. [ 274.610223][T10359] sit0: entered promiscuous mode [ 274.891954][T10366] netlink: 'syz.3.1373': attribute type 22 has an invalid length. [ 274.904476][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 275.492520][T10386] tap0: tun_chr_ioctl cmd 1074025677 [ 275.522760][T10388] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1382'. [ 275.537589][T10386] tap0: linktype set to 780 [ 276.023291][T10400] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1385'. [ 276.034498][T10396] sit0: entered promiscuous mode [ 276.120345][T10400] net_ratelimit: 80 callbacks suppressed [ 276.120360][T10400] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 276.399292][T10412] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1388'. [ 277.770158][T10440] netlink: 'syz.0.1395': attribute type 10 has an invalid length. [ 277.794394][T10440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1395'. [ 277.848706][T10442] netlink: 'syz.0.1395': attribute type 29 has an invalid length. [ 277.866532][T10440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.975595][T10441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.024386][T10442] netlink: 'syz.0.1395': attribute type 29 has an invalid length. [ 278.931584][T10489] netlink: 'syz.0.1412': attribute type 33 has an invalid length. [ 278.950024][T10489] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1412'. [ 278.974683][T10489] `: renamed from ip6tnl0 (while UP) [ 279.007795][T10489] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 279.049374][T10498] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1412'. [ 279.435095][T10515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1418'. [ 279.452016][T10515] : renamed from caif0 [ 279.477864][T10515] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 280.182315][T10543] netlink: 'syz.3.1428': attribute type 10 has an invalid length. [ 280.267584][T10543] wg1: entered promiscuous mode [ 280.272666][T10543] wg1: entered allmulticast mode [ 280.290413][T10543] team0: Device wg1 is of different type [ 280.341158][T10551] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 282.003187][T10576] netlink: 'syz.3.1435': attribute type 10 has an invalid length. [ 282.025820][T10576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1435'. [ 282.331702][T10592] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 282.654519][T10602] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 284.098290][T10624] netlink: 'syz.1.1450': attribute type 21 has an invalid length. [ 284.393016][T10633] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 284.423826][T10631] netlink: 'syz.0.1453': attribute type 21 has an invalid length. [ 285.446919][T10661] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 285.939452][T10681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1467'. [ 286.563591][T10694] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.1477'. [ 286.592158][T10694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 286.992686][T10707] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1480'. [ 287.186513][T10713] delete_channel: no stack [ 288.115096][T10739] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1492'. [ 288.141173][T10741] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1491'. [ 288.255416][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.405011][T10744] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1493'. [ 289.414254][T10770] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1500'. [ 289.423839][T10770] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1500'. [ 289.447137][T10764] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1500'. [ 289.586755][T10772] netlink: 'syz.0.1511': attribute type 9 has an invalid length. [ 290.000073][T10778] netlink: 'syz.1.1505': attribute type 21 has an invalid length. [ 290.014230][T10778] netlink: 'syz.1.1505': attribute type 20 has an invalid length. [ 290.864859][T10780] veth1_to_bond: entered allmulticast mode [ 291.323186][T10787] netlink: 'syz.3.1506': attribute type 39 has an invalid length. [ 291.340862][T10791] netlink: 'syz.2.1509': attribute type 10 has an invalid length. [ 291.380745][T10791] macvlan0: entered promiscuous mode [ 291.388742][T10791] macvlan0: entered allmulticast mode [ 291.409488][T10791] veth1_vlan: entered allmulticast mode [ 291.455005][T10791] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 293.696608][T10825] __nla_validate_parse: 4 callbacks suppressed [ 293.696622][T10825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1521'. [ 293.870941][ C0] ================================================================== [ 293.879051][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 293.886877][ C0] Write of size 72 at addr ffff88802e15a690 by task syz.2.1523/10828 [ 293.894949][ C0] [ 293.897277][ C0] CPU: 0 PID: 10828 Comm: syz.2.1523 Not tainted syzkaller #0 [ 293.904745][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.914815][ C0] Call Trace: [ 293.918101][ C0] [ 293.920951][ C0] dump_stack_lvl+0x18c/0x250 [ 293.925642][ C0] ? read_lock_is_recursive+0x20/0x20 [ 293.931025][ C0] ? show_regs_print_info+0x20/0x20 [ 293.936234][ C0] ? load_image+0x420/0x420 [ 293.940792][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 293.946270][ C0] ? __virt_addr_valid+0x10c/0x380 [ 293.951394][ C0] ? __virt_addr_valid+0x10c/0x380 [ 293.956521][ C0] ? __virt_addr_valid+0x10c/0x380 [ 293.961651][ C0] print_report+0xa8/0x210 [ 293.966083][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 293.971218][ C0] kasan_report+0x117/0x150 [ 293.976179][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 293.981313][ C0] kasan_check_range+0x241/0x290 [ 293.986272][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 293.991403][ C0] __asan_memcpy+0x40/0x70 [ 293.995837][ C0] __bpf_get_stackid+0x6c7/0x900 [ 294.000800][ C0] bpf_get_stackid_pe+0x343/0x410 [ 294.005842][ C0] bpf_prog_1bd241c1fbe93bd2+0x30/0x48 [ 294.011313][ C0] bpf_overflow_handler+0x1fc/0x510 [ 294.016530][ C0] ? bpf_overflow_handler+0xde/0x510 [ 294.021830][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 294.027133][ C0] ? __lock_acquire+0x1336/0x7d80 [ 294.032185][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 294.038444][ C0] __perf_event_overflow+0x461/0x660 [ 294.043746][ C0] perf_swevent_hrtimer+0x437/0x610 [ 294.048960][ C0] ? cpu_clock_event_read+0x40/0x40 [ 294.054189][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 294.059588][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 294.065498][ C0] ? _raw_spin_unlock+0x40/0x40 [ 294.070367][ C0] ? cpu_clock_event_read+0x40/0x40 [ 294.075571][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 294.080783][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 294.086777][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 294.092776][ C0] ? hrtimer_interrupt+0x980/0x980 [ 294.097909][ C0] ? read_tsc+0x9/0x20 [ 294.101990][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 294.108120][ C0] hrtimer_interrupt+0x39d/0x980 [ 294.113088][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 294.119005][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 294.124661][ C0] [ 294.127600][ C0] [ 294.130534][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.136529][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 294.143058][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 294.162674][ C0] RSP: 0018:ffffc90003227ae0 EFLAGS: 00000206 [ 294.168754][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: fd668650dc054000 [ 294.176732][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 294.184724][ C0] RBP: ffffc90003227b70 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 294.192707][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: dffffc0000000000 [ 294.200691][ C0] R13: ffff8880b8e3cfd8 R14: ffff888023808a00 R15: 1ffff92000644f5c [ 294.208688][ C0] ? _raw_spin_unlock+0x40/0x40 [ 294.213564][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 294.218795][ C0] try_to_wake_up+0x680/0x10e0 [ 294.223584][ C0] wake_up_q+0xb6/0x100 [ 294.227770][ C0] futex_wake+0x42a/0x4f0 [ 294.232120][ C0] ? futex_wake_mark+0x150/0x150 [ 294.237080][ C0] ? perf_poll+0x1b0/0x1b0 [ 294.241527][ C0] do_futex+0x35d/0x3e0 [ 294.245712][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 294.251630][ C0] __se_sys_futex+0x3a9/0x440 [ 294.256329][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 294.261108][ C0] ? __x64_sys_futex+0x21/0xf0 [ 294.265884][ C0] do_syscall_64+0x55/0xb0 [ 294.270312][ C0] ? clear_bhb_loop+0x40/0x90 [ 294.275002][ C0] ? clear_bhb_loop+0x40/0x90 [ 294.279695][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.285606][ C0] RIP: 0033:0x7fb4d799e0d9 [ 294.290036][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.309665][ C0] RSP: 002b:00007fb4d881e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 294.318085][ C0] RAX: ffffffffffffffda RBX: 00007fb4d7c25fa8 RCX: 00007fb4d799e0d9 [ 294.326117][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4d7c25fac [ 294.334131][ C0] RBP: 00007fb4d7c25fa0 R08: 0000000000745adf R09: 0000000000000000 [ 294.342110][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.350089][ C0] R13: 00007fb4d7c26038 R14: 00007ffc17ee7600 R15: 00007ffc17ee76e8 [ 294.358163][ C0] [ 294.361181][ C0] [ 294.363499][ C0] Allocated by task 10828: [ 294.367908][ C0] kasan_set_track+0x4e/0x70 [ 294.372504][ C0] __kasan_kmalloc+0x8f/0xa0 [ 294.377093][ C0] __kmalloc_node+0xb6/0x240 [ 294.381692][ C0] bpf_map_area_alloc+0x5e/0x110 [ 294.386640][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 294.392379][ C0] stack_map_alloc+0x32b/0x4b0 [ 294.397144][ C0] map_create+0x877/0x12f0 [ 294.401556][ C0] __sys_bpf+0x651/0x890 [ 294.405806][ C0] __x64_sys_bpf+0x7c/0x90 [ 294.410218][ C0] do_syscall_64+0x55/0xb0 [ 294.414634][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.420958][ C0] [ 294.423275][ C0] Last potentially related work creation: [ 294.428984][ C0] kasan_save_stack+0x3e/0x60 [ 294.433662][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 294.439033][ C0] call_rcu+0x153/0x900 [ 294.443197][ C0] __nf_register_net_hook+0x787/0x910 [ 294.448567][ C0] nf_register_net_hook+0xb2/0x190 [ 294.453678][ C0] nf_register_net_hooks+0x44/0x1b0 [ 294.458901][ C0] nf_ct_netns_do_get+0x213/0x5c0 [ 294.463931][ C0] nf_ct_netns_inet_get+0x3b/0x150 [ 294.469041][ C0] nf_conncount_init+0x127/0x380 [ 294.473982][ C0] ovs_ct_init+0x316/0x490 [ 294.478406][ C0] ovs_init_net+0x1e6/0x250 [ 294.482904][ C0] ops_init+0x391/0x640 [ 294.487237][ C0] setup_net+0x3b6/0xa20 [ 294.491475][ C0] copy_net_ns+0x35e/0x5d0 [ 294.495887][ C0] create_new_namespaces+0x3ce/0x700 [ 294.501172][ C0] copy_namespaces+0x42a/0x4a0 [ 294.505939][ C0] copy_process+0x16f6/0x3da0 [ 294.510613][ C0] kernel_clone+0x24b/0x8a0 [ 294.515112][ C0] __x64_sys_clone+0x1b7/0x230 [ 294.519874][ C0] do_syscall_64+0x55/0xb0 [ 294.524287][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.530182][ C0] [ 294.532498][ C0] The buggy address belongs to the object at ffff88802e15a680 [ 294.532498][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 294.546635][ C0] The buggy address is located 16 bytes inside of [ 294.546635][ C0] allocated 40-byte region [ffff88802e15a680, ffff88802e15a6a8) [ 294.560601][ C0] [ 294.562916][ C0] The buggy address belongs to the physical page: [ 294.569334][ C0] page:ffffea0000b85680 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802e15aa80 pfn:0x2e15a [ 294.580788][ C0] memcg:ffff88802ec74801 [ 294.585019][ C0] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 294.592907][ C0] page_type: 0xffffffff() [ 294.597239][ C0] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c51180 0000000000000003 [ 294.605820][ C0] raw: ffff88802e15aa80 000000008020001f 00000001ffffffff ffff88802ec74801 [ 294.614394][ C0] page dumped because: kasan: bad access detected [ 294.620899][ C0] page_owner tracks the page as allocated [ 294.626611][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6729, tgid 6727 (syz.3.276), ts 115469956249, free_ts 115434948368 [ 294.644753][ C0] post_alloc_hook+0x1c1/0x200 [ 294.649521][ C0] get_page_from_freelist+0x2181/0x22a0 [ 294.655068][ C0] __alloc_pages+0x1f0/0x460 [ 294.659661][ C0] alloc_slab_page+0x5d/0x180 [ 294.664336][ C0] new_slab+0x87/0x2d0 [ 294.668405][ C0] ___slab_alloc+0xc5c/0x12f0 [ 294.673081][ C0] __kmem_cache_alloc_node+0x11f/0x250 [ 294.678540][ C0] __kmalloc_node+0xa6/0x240 [ 294.683139][ C0] bpf_map_area_alloc+0x5e/0x110 [ 294.688079][ C0] sock_map_alloc+0x1af/0x2c0 [ 294.692766][ C0] map_create+0x877/0x12f0 [ 294.697180][ C0] __sys_bpf+0x651/0x890 [ 294.701420][ C0] __x64_sys_bpf+0x7c/0x90 [ 294.705831][ C0] do_syscall_64+0x55/0xb0 [ 294.710250][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.716146][ C0] page last free stack trace: [ 294.720819][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 294.726278][ C0] free_unref_page+0x32/0x2e0 [ 294.730951][ C0] tlb_finish_mmu+0x13e/0x220 [ 294.735629][ C0] exit_mmap+0x428/0xb90 [ 294.739871][ C0] __mmput+0x118/0x3a0 [ 294.743943][ C0] exit_mm+0x23f/0x340 [ 294.748014][ C0] do_exit+0x909/0x2530 [ 294.752180][ C0] do_group_exit+0x22d/0x2f0 [ 294.756784][ C0] get_signal+0x12a6/0x1390 [ 294.761325][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 294.766888][ C0] exit_to_user_mode_loop+0x70/0x110 [ 294.772190][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 294.777758][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 294.783224][ C0] do_syscall_64+0x61/0xb0 [ 294.787637][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.793530][ C0] [ 294.795857][ C0] Memory state around the buggy address: [ 294.801478][ C0] ffff88802e15a580: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 294.809535][ C0] ffff88802e15a600: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 294.817597][ C0] >ffff88802e15a680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 294.825831][ C0] ^ [ 294.831220][ C0] ffff88802e15a700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 294.839366][ C0] ffff88802e15a780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 294.847417][ C0] ================================================================== [ 294.855479][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.862682][ C0] CPU: 0 PID: 10828 Comm: syz.2.1523 Not tainted syzkaller #0 [ 294.870133][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.880185][ C0] Call Trace: [ 294.883461][ C0] [ 294.886314][ C0] dump_stack_lvl+0x18c/0x250 [ 294.890995][ C0] ? show_regs_print_info+0x20/0x20 [ 294.896194][ C0] ? load_image+0x420/0x420 [ 294.900706][ C0] panic+0x2ca/0x720 [ 294.904602][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 294.909629][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 294.914140][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 294.920035][ C0] ? _raw_spin_unlock+0x40/0x40 [ 294.924904][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 294.930016][ C0] check_panic_on_warn+0x84/0xa0 [ 294.934962][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 294.940077][ C0] end_report+0x6f/0x130 [ 294.944320][ C0] kasan_report+0x128/0x150 [ 294.948829][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 294.953945][ C0] kasan_check_range+0x241/0x290 [ 294.958882][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 294.963993][ C0] __asan_memcpy+0x40/0x70 [ 294.968412][ C0] __bpf_get_stackid+0x6c7/0x900 [ 294.973355][ C0] bpf_get_stackid_pe+0x343/0x410 [ 294.978387][ C0] bpf_prog_1bd241c1fbe93bd2+0x30/0x48 [ 294.983847][ C0] bpf_overflow_handler+0x1fc/0x510 [ 294.989055][ C0] ? bpf_overflow_handler+0xde/0x510 [ 294.994371][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 294.999658][ C0] ? __lock_acquire+0x1336/0x7d80 [ 295.004685][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 295.010923][ C0] __perf_event_overflow+0x461/0x660 [ 295.016209][ C0] perf_swevent_hrtimer+0x437/0x610 [ 295.021407][ C0] ? cpu_clock_event_read+0x40/0x40 [ 295.026613][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 295.031810][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 295.037716][ C0] ? _raw_spin_unlock+0x40/0x40 [ 295.042660][ C0] ? cpu_clock_event_read+0x40/0x40 [ 295.047858][ C0] __hrtimer_run_queues+0x4e8/0xc10 [ 295.053055][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 295.059040][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 295.065036][ C0] ? hrtimer_interrupt+0x980/0x980 [ 295.070153][ C0] ? read_tsc+0x9/0x20 [ 295.074220][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 295.080290][ C0] hrtimer_interrupt+0x39d/0x980 [ 295.085239][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 295.091137][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 295.096808][ C0] [ 295.099737][ C0] [ 295.102663][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.108646][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 295.115159][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 fb 4e c6 f6 65 8b 05 5c 1d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 295.134857][ C0] RSP: 0018:ffffc90003227ae0 EFLAGS: 00000206 [ 295.140925][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: fd668650dc054000 [ 295.148923][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 295.156890][ C0] RBP: ffffc90003227b70 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 295.164858][ C0] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: dffffc0000000000 [ 295.172826][ C0] R13: ffff8880b8e3cfd8 R14: ffff888023808a00 R15: 1ffff92000644f5c [ 295.180807][ C0] ? _raw_spin_unlock+0x40/0x40 [ 295.185668][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 295.190872][ C0] try_to_wake_up+0x680/0x10e0 [ 295.195649][ C0] wake_up_q+0xb6/0x100 [ 295.200245][ C0] futex_wake+0x42a/0x4f0 [ 295.204616][ C0] ? futex_wake_mark+0x150/0x150 [ 295.209557][ C0] ? perf_poll+0x1b0/0x1b0 [ 295.213986][ C0] do_futex+0x35d/0x3e0 [ 295.218140][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 295.224038][ C0] __se_sys_futex+0x3a9/0x440 [ 295.228727][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 295.233490][ C0] ? __x64_sys_futex+0x21/0xf0 [ 295.238445][ C0] do_syscall_64+0x55/0xb0 [ 295.242879][ C0] ? clear_bhb_loop+0x40/0x90 [ 295.247566][ C0] ? clear_bhb_loop+0x40/0x90 [ 295.252258][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.258154][ C0] RIP: 0033:0x7fb4d799e0d9 [ 295.262567][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.282173][ C0] RSP: 002b:00007fb4d881e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.290585][ C0] RAX: ffffffffffffffda RBX: 00007fb4d7c25fa8 RCX: 00007fb4d799e0d9 [ 295.298555][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4d7c25fac [ 295.306526][ C0] RBP: 00007fb4d7c25fa0 R08: 0000000000745adf R09: 0000000000000000 [ 295.314497][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.322463][ C0] R13: 00007fb4d7c26038 R14: 00007ffc17ee7600 R15: 00007ffc17ee76e8 [ 295.330442][ C0] [ 295.333748][ C0] Kernel Offset: disabled [ 295.338059][ C0] Rebooting in 86400 seconds..