last executing test programs: 6.928852851s ago: executing program 1 (id=2722): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x4, 0x2, 0x25, 0x6}, {0x3, 0x24, 0x6, 0x10}, {0x3, 0xfc, 0xc, 0x1}, {0x2, 0x2, 0x8e, 0xd8}]}) (async) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) 6.231474314s ago: executing program 1 (id=2727): socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000780)=ANY=[@ANYBLOB="01000600bbbbbbbbbbbbbbbbbbbbbbbbaaaaaaaaaa4061ccf79ecc440180476a535c8b77d783e4fd0cdae1568242bef434681d68fdeeabc385c875e1a254c5f1cc2f945c4689a1a02cc63fb2603203317b51eb857ac90709972036afc2bd134ccba57d19b9752ae42d947d365abdc2a20f2b903e4d7f5f001635c98a2e746ed36fce02ef27d82010d0b0e60c54920524603dee347284e407d9a80cba6ccb16c079ca6d7cccef8814"]) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ffe500"/28], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x2000000}, 0x10}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/user\x00') r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000100901000c000000"], 0x10}, 0xfc00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r1, @ANYBLOB="c500f8c5e15dc83a800d971a65028f467dcce31094db5b90f4c25cdf7951192086b69dc648cd7ced38ec374c937e1bc4f9eb1fa7942e3c6ac7d338bea976", @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES64=r3, @ANYBLOB="82ee3faf29689457f5edc790bd71227b615c6f000000000000008ff61759"], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r3, 0x0, 0xb0, 0x1000, &(0x7f0000000380)="db56539d9e812f839bc74b999d09794de9062a2c1cbdf42f83f4b92a9babd886c990b10d7e4965108d5c25d117b788548e6db3bac34f54dc284316c54c9b9064798c12f6847e1917b66fe8ef4f8fd6e9d8df2fcef1b8fc33d53c94cebfaf6b79eeffb5635db5825142ed230ecfb82ad3b887d6b04c332bad7c4c3ffcccae794bb50236cfda4fa061399507bf90f8c4699275773b88ff05680d87154f918cfba5b74565e661e43d9ed48e96d91ecf6a6f", &(0x7f0000001980)=""/4096, 0x7f, 0x0, 0x73, 0x0, &(0x7f0000000a80)="035337b893c0d77a40f572badf266dae17cada513ab6dc4adb933d7d7c8c54040080c670be7c344074ce97843cf54d5cc60f6325e47fb715f9998312c18cb21e0967f09173180000000000000efb6fc1ceb2a7894f6fcfcfff450586118c5a6b53e72899b29bb7952c6c9d93fb5c7d7a1ddf31", &(0x7f0000002a00), 0x2, 0x0, 0xd}, 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7f, 0x4, 0x80000000, 0x40800, r0, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018116f005f8d37fee5c52d62cc5d8e2a53cc65029091f097102f48eb781b0d4c3b00"/65, @ANYRES32, @ANYBLOB="0000000000000000b7080000620800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.873651985s ago: executing program 1 (id=2732): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x57, 0x1f00c00e}, 0x801) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, &(0x7f0000000100)) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000001d40)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x80, 0x0}, 0x24008004) 5.783012488s ago: executing program 1 (id=2733): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffca7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = syz_clone(0x48004400, &(0x7f0000000840)="7573ae3e1d819ec718facf832279b0a931a2a640ad2db312136fdfb1cc76cb", 0x1f, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="737084cfc73f168d5e3fbc9537d6") sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e60d", 0x2}], 0x1, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}], 0x20, 0x10}, 0x10044001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[], 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000580)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)={r7}, 0x4) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) setsockopt$sock_attach_bpf(r8, 0x84, 0x18, &(0x7f0000000000)=r10, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1d, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x0, 0x0, 0x9, 0x9, 0xffffffffffffffc0, 0x7ffffffffffffffe}, @generic={0x9, 0x7, 0x8, 0x1, 0xbcf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000340)='syzkaller\x00', 0x4394, 0x83, &(0x7f0000000380)=""/131, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x18, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x6, 0x5, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r0, r10], 0x0, 0x10, 0x1c00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5.579317114s ago: executing program 0 (id=2736): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x200100, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.39754035s ago: executing program 1 (id=2737): r0 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r0, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000997927c3685ad0241d080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r9) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r9, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) 4.984141593s ago: executing program 0 (id=2740): socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc601000050008000900053582c104003e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x8c, &(0x7f0000001540)=""/4132, 0x0, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x6, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x95}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}], &(0x7f0000000580)='GPL\x00', 0x8, 0xd3, &(0x7f0000000a80)=""/211, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x1, 0xd}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000d00)=[r5], &(0x7f0000000d40)=[{0x4, 0x2, 0xf, 0x4}, {0x1, 0x4, 0x1, 0x4}, {0x5, 0x2, 0x8, 0xb}, {0x1, 0x2, 0x8, 0x1}, {0x4, 0x1, 0x3, 0x7}, {0x1, 0x4, 0xe, 0x5}, {0x4, 0x5, 0xc}, {0x1, 0x1, 0xd, 0xc}, {0x4, 0x5, 0x4, 0xc}, {0x2, 0x3, 0x3, 0xb}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2933], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001880)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000000000000000000300000000030000000200000000000000020000000100000f0100000000000000000000000000000099000000000000000c00000000000000000000000c00000000000000000100000f0300000000000000000000fcff000000a58e9300005f5f5f00"], &(0x7f00000019c0)=""/173, 0x82, 0xad, 0x1}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 4.264952435s ago: executing program 1 (id=2742): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x20000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d08", 0x13}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)}, 0x0) close(r2) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xdd, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000200000000000004040009000000010000002cfad1c535820336b50bd46dd216dd30737452b55bdbe56ef00b6f245db6eaf7a6ff010000a75b8bb7bdf33c7bf2929a7f2dac6d04a702f7362dc989a7d547c732ece9494a490c5ff6446d9ac0a3c3b08e8b8781f14d1137e70a348947d6835b76e9fa69f41ee53dfb86cd46a2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_clone(0x80200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.816633379s ago: executing program 0 (id=2745): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x3eb}, {&(0x7f0000001b80)="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", 0x614}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b", 0x7}, {0x0}], 0x2}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000580)={'pim6reg\x00', 0x1}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x305) 3.683864514s ago: executing program 3 (id=2746): ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth0_vlan\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'hsr0\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xb, 0x4, 0x6f, 0xd3, 0x0, 0x8, 0x10004, 0x11, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x77, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x1, 0x1, 0x5, 0x8, 0x1ff, 0x200, 0x1, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x8) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x200}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x8018, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x157, 0x157, 0xa, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x2e, 0x6}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x37, 0x1}, @enum={0xe, 0x7, 0x0, 0x6, 0x4, [{0x9, 0x8000}, {0xd, 0x2}, {0x9, 0x5}, {0xe, 0x5d29}, {0x0, 0xfffffffb}, {0xb, 0x5}, {0x0, 0x9}]}, @datasec={0x1, 0x6, 0x0, 0xf, 0x1, [{0x1, 0xa4, 0xffffff82}, {0x1, 0x2, 0x8}, {0x3, 0x8e9, 0x401}, {0x4, 0x8a8, 0x4}, {0x2, 0xd8b, 0xf2ea}, {0x4, 0x9, 0x8}], '_'}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @datasec={0xa, 0x8, 0x0, 0xf, 0x2, [{0x1, 0x5, 0x30000}, {0x2, 0x1, 0x4}, {0x1, 0x2, 0x9}, {0x4, 0xfff, 0x2}, {0x2, 0x2ee0, 0x6faf}, {0x1, 0x1ff, 0x8}, {0x5, 0x7, 0x2}, {0x1, 0x4}], "8429"}, @float={0xb, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x0, 0x5f, 0x30, 0x0, 0x2e, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000700)=""/24, 0x17a, 0x18, 0x0, 0x800}, 0x28) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r2}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x1, 0x3, 0x0, 0x10200, 0xffffffffffffffff, 0x5, '\x00', r4, r5, 0x3, 0x5, 0x1, 0x0, @void, @value, @value=r6}, 0x50) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000840)=0x6) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000880)=r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@ifindex=r4, r2, 0x1b, 0x20, 0x0, @void, @void, @void, @value=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000cc0)={&(0x7f0000000940)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000980)="704f14f88df349ce2724f03312f0787c6cf847bee53fbf16c099de34c5e0f4e32b8548c4c0c5987b8796ba714d4144955f2f70f7777697f60f795f03fa2efc806e3823c6f9e4c194fc5f8bd0972bd3c116337bb95a4b2c02934794c43e4dbbf9476955ba5a0023ea8a2dae4bfd86acc19b0c4299b8", 0x75}, {&(0x7f0000000a00)="9d18f000c94267c8921183e73fe0d6103f2821e7", 0x14}, {&(0x7f0000000a40)="f403e8926d612a008cd63f112555b2c03ac78357ec88ae572a15b1772f4fd913941229fceb9994bf2e42d59ee646693dacd6f4dd771adb4e89d5d2a95f91e1f26209699f804065e2c5c4e763831e47f541a0da80c7465cf9db04284e4c95f35a09147af9440a6ebf424227b39cd78f3f3ac3c322cd94755e8388a27d6e70aa337d98ca6b36d6ec782d38292132efff66004cee86c9b77d056f6654d876f1bcb03470fdf10c771d1f5240621e24b856953e8ce765b683c871622aad0556a384a3585e77d4fe44680cdfa3f577fa5da1db57ea6054ca44023b3e83705b3fda8d1e58a008d6f0bf350879467c8f4c54efc36fb987", 0xf3}], 0x3, &(0x7f0000000b80)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x4d, 0x1, [{0x6, 0xb, "298a1e4408bfd0c03a"}, {0x7, 0x6, 'fJ0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0xa0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) mkdirat$cgroup(r5, &(0x7f0000000140)='syz0\x00', 0x1ff) close(r5) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="d60361d037a5058509a60c5f48108506e60d", 0x12}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x10}, 0x10044001) write$cgroup_pid(r5, &(0x7f0000000400), 0x12) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) 2.54121093s ago: executing program 2 (id=2751): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r4], 0xfe33) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00memory +io +cpuacct -mN-memory -perf_evet \x00'], 0x31) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffe}, 0x0, 0x4, 0xffffffffffffffff, 0x9) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0x7}, 0x0, 0x8, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x80000041}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.490220141s ago: executing program 3 (id=2752): socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc601000050008000900053582c104003e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x8c, &(0x7f0000001540)=""/4132, 0x0, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x6, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x95}, @map_fd={0x18, 0x3, 0x1, 0x0, r4}], &(0x7f0000000580)='GPL\x00', 0x8, 0xd3, &(0x7f0000000a80)=""/211, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x1, 0xd}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000d00)=[r5], &(0x7f0000000d40)=[{0x4, 0x2, 0xf, 0x4}, {0x1, 0x4, 0x1, 0x4}, {0x5, 0x2, 0x8, 0xb}, {0x1, 0x2, 0x8, 0x1}, {0x4, 0x1, 0x3, 0x7}, {0x1, 0x4, 0xe, 0x5}, {0x4, 0x5, 0xc}, {0x1, 0x1, 0xd, 0xc}, {0x4, 0x5, 0x4, 0xc}, {0x2, 0x3, 0x3, 0xb}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2933], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000001880)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000000000000000000300000000030000000200000000000000020000000100000f0100000000000000000000000000000099000000000000000c00000000000000000000000c00000000000000000100000f0300000000000000000000fcff000000a58e9300005f5f5f00"], &(0x7f00000019c0)=""/173, 0x82, 0xad, 0x1}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 2.386253155s ago: executing program 0 (id=2753): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="b4000000000b00007910000000000000db100003a10000009500740000000000079c69dc7ded5dbe11b62ac5ea9fca11027d19e93adb605feb92de3145e8ed7ac5b8902070213cdfdc646c4890cdeb50347c32060581172b94c6dd22a2b589b6cbad46ed6ef79f7468f5e603950c4f67581c92ef8a7e000017d5f1110ed29d3b2aaf153bcf69bebf18262352ba68d39942c3b567e06411d8879622f74cc431dabd332c4c4702e4c3d41bfb54b574e8947309c7503c3e8ea23e12e064f442e8cbeab77cdf1ebd8465593c0000000000000000000000000000006f429b14459ffd88bee4b9d894ddad0980af53a1feb155f1010400bfb5b81b73035fd5a76985d4710fb6fbfb2a933a09dd6317e77ca962327022fb34017197ff712a35c63cdd0dec053fdbc310f29c6b8be788b559a80135bb7369351b952ade2339eddde60eb16301b0f4640be5852e1cef861b861b7b19ea03dfc83f729d02e9e73db24dd5dfb09d4b1bbbd5dd5daa4615b0845f264f229f9806862e116612ade616b1769e97549d095b0a4d02801406491d77a65fe74f8aa67391e8cb3c000020000000000083b92cdfc143ceba1c18cab05100ecc4"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x7, [@ptr={0xc, 0x0, 0x0, 0x2, 0x5}, @datasec={0x6, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x68b20d57, 0x9a78}, {0x3, 0xc3, 0x80}, {0x2, 0xd0c, 0x401}, {0x4, 0xd, 0x3}, {0x3, 0x2, 0x1}], "25ae"}, @typedef, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0x6, 0x2}, {0xa, 0x3}, {0x4, 0x5}]}, @union={0x3, 0x3, 0x0, 0x5, 0x0, 0xb, [{0x5, 0x4, 0x1}, {0xf, 0x1, 0xa2}, {0xf, 0x5, 0x8}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000100)=""/243, 0xdf, 0xf3, 0x0, 0x7}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x7, [@ptr={0xc, 0x0, 0x0, 0x2, 0x5}, @datasec={0x6, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x68b20d57, 0x9a78}, {0x3, 0xc3, 0x80}, {0x2, 0xd0c, 0x401}, {0x4, 0xd, 0x3}, {0x3, 0x2, 0x1}], "25ae"}, @typedef, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0x6, 0x2}, {0xa, 0x3}, {0x4, 0x5}]}, @union={0x3, 0x3, 0x0, 0x5, 0x0, 0xb, [{0x5, 0x4, 0x1}, {0xf, 0x1, 0xa2}, {0xf, 0x5, 0x8}]}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000100)=""/243, 0xdf, 0xf3, 0x0, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0xa7, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0xa7, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="12000000250000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r9, &(0x7f00000003c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r9, &(0x7f00000003c0), 0x0}, 0x20) r10 = socket$kcm(0x2, 0x922000000001, 0x106) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0xc, &(0x7f00000002c0)=r11, 0x4) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r12}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x4, 0x0, 0x1}, 0x50) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x4, 0x0, 0x1}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x8, 0x6, 0x800b, 0xffffffffffffffff, 0x1, '\x00', 0x0, r1, 0x2, 0x2, 0x2, 0x5, @value=r1}, 0x50) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r16, &(0x7f0000000000), 0x2a979d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3e, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50) (async) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3e, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x64}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x3, 0x8, 0x5, 0x8, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x31, &(0x7f0000000480)=""/49, 0x41100, 0x2, '\x00', r6, 0x1b, r1, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xf, 0x4, 0x7}, 0x10, r7, 0x0, 0xa, &(0x7f0000000ac0)=[r9, 0x1, r11, r12, r13, r14, r15, r16, 0xffffffffffffffff, r17], &(0x7f0000000b00)=[{0x3, 0x2, 0x4, 0x6}, {0x4, 0x4, 0x7, 0x7}, {0x5, 0x5, 0x2}, {0x4, 0x5, 0xc, 0xb}, {0x1, 0x2, 0x5, 0x6}, {0x4, 0x4, 0x5, 0x2}, {0x0, 0x5, 0x3, 0x6}, {0x0, 0x3, 0xc, 0x8}, {0x3, 0x1, 0x4, 0xa}, {0x3, 0x5, 0xe, 0x5}], 0x10, 0x7fed}, 0x94) 2.280746118s ago: executing program 2 (id=2754): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020c0c000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.661717217s ago: executing program 0 (id=2755): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='cpu\t>-&&\t') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32, @ANYBLOB="000000001a0000000000800000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)={[{0x2d, 'io'}, {0x2b, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'memory'}, {0x2b, 'blkio'}, {0x7b, 'hugetlb'}, {0x2b, 'blkio'}]}, 0x2e) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000002c0), 0x0}, 0x20) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) mkdir(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x18e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xfffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0xb, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94) 1.553313941s ago: executing program 2 (id=2756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000080), 0x0}, 0x20) 1.471270423s ago: executing program 3 (id=2757): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x1, 0x2, 0x1, 0x6, 0x9, 0xfffffffffffffff8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x42, &(0x7f00000000c0)=""/66, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0xffffffffffffffff], &(0x7f0000000180)=[{0x0, 0x2, 0xc, 0x1}, {0x5, 0x5, 0x9, 0x9}, {0x4, 0x2, 0x2, 0x7}, {0x3, 0x1, 0x6}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x4, 0xd}, {0x5, 0x3, 0x6}]}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="152fc22f3e77996bbd5b1e9364e563c5cd0b1b2ed27f12f4ab2390ad7f5640ed9d4b8c3a2d7d73e673e56a744e8f4ccec8eef2ff7e561adb46d2c233e5d84f774f1cd5293dd6a2d4f39a25e1422f4aa2b620623bd1d3bb82902844d618994ac5bcc47520d7cfe9acc1ee79ba854adb5fefbf31194ff0fda6274118946c4f77a5b23cddbca701b87f49eb1dde1d092d139d4f10", 0x93}, {&(0x7f00000013c0)="ad24a275c967b5f8c5f7b8ab092af42aeb25c60c01bcad724e04b855349e91a505a3456e40147878cf93eba34f913ec1586485985fba25d546d880489914803b205641a6bae60800da68dc26c7823befdfb72d11358bf1c31434f89720b569408eff267615e7eb85149076bfa4791b56261b80baf40f5bb64b00c04c121808d6c54e6e9355595f961da02b3355dabab082ba0858aba4ec28fe65131e69ff889c5e13053aa2d698a771692e8056fbe91aeab081d5eb331b22ec19d1a757f0a3b573cd7dc64b73292fa925c15e589dfd4dbc23d858fb53fc9d9b0d8984", 0xdc}], 0x3, &(0x7f0000001500)=[{0x60, 0x117, 0x0, "41e322512a859b3f9af6b34558ae30dbf203207473bc01c107047ba2bdd8a989711fe78ffd0925ede4d937ae452467354e0d6b275978f9b450ef55071462b570e0fba70fb297947904e2"}, {0xb0, 0x110, 0x2, "e239207c2b91673b75b93be5b8cd421837edd416c01ad3ac277b7da8c659e464a4afd6047eceed6adebd5edcd36db02511d7a95bcc127127c9371392b58772ff1532450f3643b1bbd9a4766d3b8deb07826c9686d017fbc00b45c11d3029048918bb3ca42ff2f39f7b0eb8d855a83473ce8971bdf0b34502fa7474938147df6d1027083d0a0f68d0801f30b6014893d696683d2131299b5aaf598df57631"}, {0x18, 0x29, 0x7, "7baa3c8b3859"}], 0x128}, 0x20000084) socketpair(0x26, 0xa, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000001700)={0x0, 0x80, 0x0, 0x0, 0x76, 0x2, 0x0, 0x6, 0x10000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000016c0), 0xa}, 0x4, 0x3, 0x4, 0x0, 0x0, 0xffffffff, 0xdb, 0x0, 0x30, 0x0, 0xb}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001780)={0x9}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000001800)=0x234) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001880)={0x4, 0x80, 0xfe, 0x7, 0xc, 0x63, 0x0, 0x8, 0x88113, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000001840)}, 0x329693e84c079506, 0x7fffffff, 0x65ee4602, 0x5, 0x1000, 0x87ca, 0x9, 0x0, 0x276b, 0x0, 0x2}, r7, 0x0, r5, 0x8) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)=@o_path={&(0x7f0000001940)='./file0\x00', 0x0, 0x10, r3}, 0x18) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000019c0), 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a00)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x8000, '\x00', 0x0, r9, 0x2, 0x4, 0x4}, 0x50) r11 = openat$cgroup_procs(r7, &(0x7f0000001a80)='cgroup.threads\x00', 0x2, 0x0) r12 = gettid() write$cgroup_pid(r11, &(0x7f0000001ac0)=r12, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r10, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{r13, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c80)={r14, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002180)={0xffffffffffffffff, 0xe0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f40)=[0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000001f80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001fc0), &(0x7f0000002000), 0x8, 0x48, 0x8, 0x8, &(0x7f0000002040)}}, 0x10) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000021c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002240)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x4, 0x16, &(0x7f0000001cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @map_fd={0x18, 0x3, 0x1, 0x0, r15}, @call={0x85, 0x0, 0x0, 0x67}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x44}, @generic={0xf8, 0x6, 0x9, 0x5}, @call={0x85, 0x0, 0x0, 0xa1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x800}]}, &(0x7f0000001d80)='GPL\x00', 0x7707, 0xf3, &(0x7f0000001dc0)=""/243, 0x40f00, 0x22, '\x00', r16, @fallback=0x27, r17, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002200)={0x4, 0xd, 0x5, 0x5e}, 0x10, r18, r2, 0x4, &(0x7f0000002280)=[r14, r13, r14, r13, r14], &(0x7f00000022c0)=[{0x4, 0x4, 0x8, 0xc}, {0x4, 0x3, 0x1, 0x5}, {0x1, 0x2, 0xb, 0x7}, {0x0, 0x1, 0xc, 0x3}], 0x10, 0x8}, 0x94) r19 = perf_event_open(&(0x7f0000002440)={0x4, 0x80, 0xd5, 0x5, 0x1, 0x7, 0x0, 0xfff, 0x50b0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0xffffffffffff0000, 0x5}, 0x12004, 0x6, 0x9, 0x1, 0x2, 0x3, 0x100, 0x0, 0xfffff800, 0x0, 0x7fffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000023c0)={0x5, 0x80, 0x5, 0x6, 0x5, 0x3d, 0x0, 0x400, 0x88400, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x2}, 0x181, 0x7, 0xfe8, 0x0, 0x9, 0x9, 0xfffd, 0x0, 0x8, 0x0, 0xf4}, r0, 0xe, r19, 0x8) sendmsg$tipc(r3, &(0x7f00000038c0)={&(0x7f00000024c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x4}}, 0x10, &(0x7f0000003840)=[{&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000003500)="c97a5e19b2458cf1a23ab0a3fb7c02a4f945cd44ffac6c862e2251e70d126ef33f959fb2c9908f3eca7c48407f67a72059800652d62bd7", 0x37}, {&(0x7f0000003540)="a45ff5b15c720d4385ddfc4ad9b6dd0abd6ed8de26eb92a435e01bec721dcd53914aebe70658be85fdd3db8ca8bf072984722499cbcfde71498c207ca00945ed762895a67d1c3cf8ed92bac25073f1c79557575f448ec6e8f54798c5641b3a2a7092", 0x62}, {&(0x7f00000035c0)}, {&(0x7f0000003600)="6af3b41f96a87f82909a28add2375713898c3e447d11bcec49cb8346b0cfa9bfc8ebe35d5f1a53d397b7be6668a5f974b2147dc051f60d99117d06de069c950bce8c74c643fc42efdb3386734cb009bd8ac872e9a9aa44ba028f01d1610efd049a5036ffe2ccda25e32b4594c735befa52234c088d3c42", 0x77}, {&(0x7f0000003680)="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", 0xfe}, {&(0x7f0000003780)="c894ca3c17d7df19a8ba93a876f70c1480f4ba5e5d3e9f724ae6c541b633371865f7ea15279fe59f19c2a29b7a871d1f69d790e7976b30462ed2223d5482496124d756872604e3c1fa6c3ca6e53a5c620290384692730ef1909cde32a05b0f826d23a3e3ee9416a2aeb8ab05821526ae2433d572557bfc01f2dc658cc58e1c30c468307c60b4c10a103096959050", 0x8e}], 0x7, 0x0, 0x0, 0x80}, 0x4) 1.25191077s ago: executing program 2 (id=2758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000a000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd}, 0x94) 1.160036443s ago: executing program 2 (id=2759): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x200100, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x104, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 98.885997ms ago: executing program 2 (id=2760): socket$kcm(0xa, 0x6, 0x0) (async) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009660fa10357cdc0fe026eb693528379ba1fbeae7ca3060b38bd9ddaf9bf209ad98c3533dcd517abd6daf1f1f3d9b81004f5649ac595b98a86623f0a01fe24b65781b2dbfc16e1ce289f27511c4df4c6e174252d69d482293c3b3dcdfef8497d6ed5b826cff81edff862ff15d83814a9d3c5b3ca859180000c6bc7087a0bb011b9f133d1d8489a197dc8148fecc25c69763e1462411ddbe862afb47ad95939bcaa870077ff5dd0b61ee277383"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb321}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb321}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000006d0500000400000042000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000d4d90fc642000000451f6064f36f17d40a35fecac65118c334000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg(r0, 0x0, 0x2000000) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x86, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x86, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x3400c084) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 21.437439ms ago: executing program 3 (id=2761): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x12) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100)={'bridge_slave_1', 0x32, 0x32}, 0x11) r1 = syz_clone(0x800, &(0x7f0000000140)="7c6370ebd40e31bf91c0c9787319fc42a71b5d770e1bcd1077b2f4620aa33e0815ec042f9e3883d0e7a971cbef194147c2867a2a5926665c0e017267b9655fb72265736a899835c3c0c99b031da5c582b9c11d0be804dbf3f5b5be04e72bfb2ede6e49952a239edfbc", 0x69, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="26b57f8a76a081906c1573eec58427d43731ac373127962024a8e8398a78320fa133a2a53df0ceb546029236a4c8f60e0a4b2cb57797db9e3da8dbeae65884321d7ce263016a891080989f8c40f51b655a0ef7f4e54b960161d094d46302fc1b57c44a9c0a5aa0481781f8d9") ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000002c0)) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x80, 0xff, 0x3, 0x3, 0x81, 0x0, 0x9, 0xd, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xce430000, 0x0, @perf_config_ext={0x8, 0xb742}, 0x20, 0x0, 0x200, 0x5, 0x3, 0x6, 0x3ff, 0x0, 0x3, 0x0, 0xfff}, r0, 0xb, r0, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000003c0)='\\/\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xc925) r3 = perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x3d, 0x6, 0x3, 0x5, 0x0, 0x0, 0x10400, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xa53}, 0x22, 0x58e81767, 0x80000000, 0x2, 0x6800000000000000, 0x7, 0xc, 0x0, 0x80000000, 0x0, 0x2e}, r1, 0xf, r0, 0x1) r4 = openat$cgroup_ro(r0, &(0x7f0000000480)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0xff, 0xd0, 0x6, 0x0, 0x0, 0xc8d2, 0x12, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x4, @perf_config_ext={0x400, 0x1}, 0x0, 0x1, 0x2, 0x7, 0x3, 0x81, 0x10, 0x0, 0x9, 0x0, 0x7}, r6, 0x10, r2, 0x1) getpid() openat$cgroup_int(r5, &(0x7f00000005c0)='pids.max\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'wlan0\x00', 0x1000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=0x1, 0x20, 0x1, 0x5d05, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000007c0)={0xf, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@fallback=r0, r4, 0xf, 0x2037, r4, @void, @void, @value=r10, @void, r9}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r8, 0x58, &(0x7f0000000840)}, 0x10) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000900)=0x3) close(r4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000940)=r4, 0x4) 0s ago: executing program 0 (id=2762): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d800000021008344b904020000", 0xd}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44b904021d080010000000e8fe55a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0}, 0x0) (async) close(0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d800000021008344b904020000", 0xd}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.2.1318'. [ 292.478650][ T9635] net_ratelimit: 83 callbacks suppressed [ 292.478686][ T9635] openvswitch: netlink: IP tunnel dst address not specified [ 292.800172][ T9648] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1320'. [ 292.821514][ T9647] netlink: 'syz.0.1323': attribute type 29 has an invalid length. [ 292.829890][ T9647] netlink: 'syz.0.1323': attribute type 3 has an invalid length. [ 292.867577][ T9647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1323'. [ 292.979051][ T9648] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1320'. [ 294.044660][ T9678] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 294.074720][ T9678] netlink: 'syz.3.1332': attribute type 4 has an invalid length. [ 294.103400][ T9678] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1332'. [ 294.236401][ T9677] delete_channel: no stack [ 294.243744][ T9677] delete_channel: no stack [ 294.438772][ T9681] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1333'. [ 295.898037][ T9718] syz.2.1348: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 295.920412][ T9718] CPU: 0 PID: 9718 Comm: syz.2.1348 Not tainted syzkaller #0 [ 295.927863][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.938478][ T9718] Call Trace: [ 295.941792][ T9718] [ 295.944740][ T9718] dump_stack_lvl+0x18c/0x250 [ 295.949559][ T9718] ? show_regs_print_info+0x20/0x20 [ 295.955869][ T9718] ? load_image+0x420/0x420 [ 295.960505][ T9718] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.967667][ T9718] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 295.974495][ T9718] warn_alloc+0x246/0x340 [ 295.979621][ T9718] ? stack_trace_save+0xaa/0x100 [ 295.986268][ T9718] ? zone_watermark_ok_safe+0x230/0x230 [ 295.992327][ T9718] ? kasan_set_track+0x5f/0x70 [ 295.997142][ T9718] ? kasan_set_track+0x4e/0x70 [ 296.002032][ T9718] ? __kasan_kmalloc+0x8f/0xa0 [ 296.006830][ T9718] ? xsk_init_queue+0xad/0x100 [ 296.011784][ T9718] ? xsk_setsockopt+0x4e5/0x760 [ 296.016939][ T9718] ? do_sock_setsockopt+0x175/0x1a0 [ 296.023113][ T9718] ? __x64_sys_setsockopt+0x182/0x200 [ 296.028848][ T9718] __vmalloc_node_range+0x126/0x1330 [ 296.035472][ T9718] ? free_vm_area+0x50/0x50 [ 296.041442][ T9718] vmalloc_user+0x74/0x80 [ 296.045850][ T9718] ? xskq_create+0xbf/0x170 [ 296.050379][ T9718] xskq_create+0xbf/0x170 [ 296.054749][ T9718] xsk_init_queue+0xad/0x100 [ 296.059553][ T9718] xsk_setsockopt+0x4e5/0x760 [ 296.064260][ T9718] ? xsk_poll+0x680/0x680 [ 296.068795][ T9718] ? __fget_files+0x28/0x4b0 [ 296.073670][ T9718] ? __fget_files+0x28/0x4b0 [ 296.078343][ T9718] ? aa_sock_opt_perm+0x74/0x100 [ 296.083437][ T9718] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 296.089061][ T9718] ? security_socket_setsockopt+0x7e/0xa0 [ 296.095843][ T9718] ? xsk_poll+0x680/0x680 [ 296.100221][ T9718] do_sock_setsockopt+0x175/0x1a0 [ 296.105275][ T9718] ? __fdget+0x180/0x210 [ 296.109546][ T9718] __x64_sys_setsockopt+0x182/0x200 [ 296.117613][ T9718] do_syscall_64+0x55/0xb0 [ 296.123242][ T9718] ? clear_bhb_loop+0x40/0x90 [ 296.128781][ T9718] ? clear_bhb_loop+0x40/0x90 [ 296.134203][ T9718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.141270][ T9718] RIP: 0033:0x7f273639ce59 [ 296.146028][ T9718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.170199][ T9718] RSP: 002b:00007f27371c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.179964][ T9718] RAX: ffffffffffffffda RBX: 00007f2736616180 RCX: 00007f273639ce59 [ 296.190250][ T9718] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 296.198902][ T9718] RBP: 00007f2736432d6f R08: 0000000000000004 R09: 0000000000000000 [ 296.207530][ T9718] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 296.218764][ T9718] R13: 00007f2736616218 R14: 00007f2736616180 R15: 00007ffd2fa19de8 [ 296.227503][ T9718] [ 296.258886][ T9718] Mem-Info: [ 296.262836][ T9718] active_anon:8237 inactive_anon:0 isolated_anon:0 [ 296.262836][ T9718] active_file:17057 inactive_file:40031 isolated_file:0 [ 296.262836][ T9718] unevictable:768 dirty:39 writeback:0 [ 296.262836][ T9718] slab_reclaimable:10142 slab_unreclaimable:100948 [ 296.262836][ T9718] mapped:25446 shmem:1361 pagetables:558 [ 296.262836][ T9718] sec_pagetables:0 bounce:0 [ 296.262836][ T9718] kernel_misc_reclaimable:0 [ 296.262836][ T9718] free:1337561 free_pcp:10897 free_cma:0 [ 296.321413][ T9718] Node 0 active_anon:32848kB inactive_anon:0kB active_file:68228kB inactive_file:159924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101784kB dirty:156kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10696kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no [ 296.377336][ T9718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 296.430424][ T9718] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.507599][ T9718] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 296.517060][ T9718] Node 0 DMA32 free:1444664kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:32608kB inactive_anon:0kB active_file:68228kB inactive_file:159092kB unevictable:1536kB writepending:156kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:20256kB local_pcp:13464kB free_cma:0kB [ 296.556702][ T9718] lowmem_reserve[]: 0 0 0 0 0 [ 296.601588][ T9718] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.630673][ T9718] lowmem_reserve[]: 0 0 0 0 0 [ 296.635468][ T9718] Node 1 Normal free:3889716kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21952kB local_pcp:10784kB free_cma:0kB [ 296.671813][ T9718] lowmem_reserve[]: 0 0 0 0 0 [ 296.678116][ T9718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.708244][ T9733] netlink: 'syz.1.1350': attribute type 33 has an invalid length. [ 296.725127][ T9733] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1350'. [ 296.736334][ T9718] Node 0 DMA32: 1428*4kB (UME) 1445*8kB (UME) 1068*16kB (UME) 1410*32kB (UME) 1091*64kB (UME) 268*128kB (UME) 78*256kB (UM) 26*512kB (UM) 21*1024kB (UME) 11*2048kB (UME) 289*4096kB (UM) = 1444664kB [ 296.761600][ T9718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.802264][ T9718] Node 1 Normal: 291*4kB (UME) 69*8kB (UME) 40*16kB (UME) 70*32kB (UME) 15*64kB (UME) 7*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889716kB [ 296.841529][ T9718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.851342][ T9718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.861071][ T9718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.881734][ T9735] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1352'. [ 296.917437][ T9718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.944373][ T9718] 58449 total pagecache pages [ 296.949133][ T9718] 0 pages in swap cache [ 296.953554][ T9718] Free swap = 124996kB [ 296.958185][ T9718] Total swap = 124996kB [ 296.962918][ T9718] 2097051 pages RAM [ 296.966758][ T9718] 0 pages HighMem/MovableOnly [ 296.971702][ T9718] 416933 pages reserved [ 296.976142][ T9718] 0 pages cma reserved [ 297.013310][ T9735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.037520][ T9735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.077615][ T9735] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 297.092679][ T9735] veth1_vlan: left allmulticast mode [ 297.139476][ T9735] bond0 (unregistering): Released all slaves [ 297.181709][ T9745] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1355'. [ 297.236293][ T9736] netlink: 'syz.0.1352': attribute type 6 has an invalid length. [ 297.246624][ T9736] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1352'. [ 297.324733][ T9742] netlink: 'syz.1.1354': attribute type 3 has an invalid length. [ 298.180007][ T9762] netlink: 'syz.2.1359': attribute type 21 has an invalid length. [ 298.243308][ T9762] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1359'. [ 298.257921][ T9763] netlink: 'syz.3.1360': attribute type 3 has an invalid length. [ 298.265759][ T9762] netlink: 'syz.2.1359': attribute type 4 has an invalid length. [ 298.265779][ T9762] netlink: 'syz.2.1359': attribute type 3 has an invalid length. [ 298.287109][ T9762] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1359'. [ 298.296521][ T9763] netlink: 'syz.3.1360': attribute type 16 has an invalid length. [ 298.305382][ T9763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1360'. [ 298.956892][ T9771] syzkaller0: entered promiscuous mode [ 298.964539][ T9771] syzkaller0: entered allmulticast mode [ 300.043020][ T9789] netlink: 'syz.1.1367': attribute type 10 has an invalid length. [ 300.053304][ T9789] bridge0: port 3(dummy0) entered disabled state [ 300.060049][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.068085][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.111840][ T9789] bridge0: port 3(dummy0) entered blocking state [ 300.118487][ T9789] bridge0: port 3(dummy0) entered forwarding state [ 300.125453][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.132839][ T9789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.140452][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.149341][ T9789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.188923][ T9789] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 300.618079][ T9794] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 302.047714][ T9835] syzkaller0: entered promiscuous mode [ 302.063322][ T9835] syzkaller0: entered allmulticast mode [ 302.098980][ T9837] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1380'. [ 302.140096][ T9837] netlink: 751 bytes leftover after parsing attributes in process `syz.2.1380'. [ 303.298291][ T9856] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1384'. [ 303.325067][ T9860] netlink: 'syz.3.1387': attribute type 1 has an invalid length. [ 303.339926][ T9860] netlink: 'syz.3.1387': attribute type 3 has an invalid length. [ 303.358062][ T9860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1387'. [ 304.734380][ T9887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1394'. [ 305.052206][ T9891] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1395'. [ 305.482417][ T9904] netlink: 'syz.1.1399': attribute type 21 has an invalid length. [ 307.210455][ T9927] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1408'. [ 307.227797][ T9927] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1408'. [ 307.253149][ T9927] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1408'. [ 307.283364][ T9926] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1408'. [ 307.433905][ T9926] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 307.465851][ T9926] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1408'. [ 307.590032][ T9926] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 307.598503][ T9926] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.648123][ T9926] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 307.803393][ T9945] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1413'. [ 308.088754][ T9954] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1416'. [ 308.349446][ T9960] netlink: 'syz.3.1419': attribute type 9 has an invalid length. [ 308.394397][ T9960] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1419'. [ 308.422695][ T9960] netlink: 'syz.3.1419': attribute type 10 has an invalid length. [ 308.457631][ T9960] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 309.133876][ T9978] €Â0: renamed from batadv_slave_1 (while UP) [ 309.220502][ T9970] netlink: 'syz.1.1422': attribute type 21 has an invalid length. [ 309.247663][ T9970] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1422'. [ 309.512946][ T9987] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1428'. [ 312.017793][T10052] netlink: 'syz.3.1450': attribute type 1 has an invalid length. [ 312.165235][T10020] delete_channel: no stack [ 312.751086][T10068] __nla_validate_parse: 6 callbacks suppressed [ 312.751123][T10068] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1455'. [ 313.005354][T10075] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1458'. [ 313.704587][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.732129][T10096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.069775][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.130480][T10096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.336826][T10140] netlink: 'syz.2.1478': attribute type 1 has an invalid length. [ 316.454696][T10140] netlink: 'syz.2.1478': attribute type 2 has an invalid length. [ 316.470536][T10140] netlink: 'syz.2.1478': attribute type 2 has an invalid length. [ 316.490376][T10140] netlink: 'syz.2.1478': attribute type 3 has an invalid length. [ 316.499176][T10140] netlink: 'syz.2.1478': attribute type 4 has an invalid length. [ 316.543554][T10140] netlink: 'syz.2.1478': attribute type 5 has an invalid length. [ 316.559854][T10140] netlink: 'syz.2.1478': attribute type 6 has an invalid length. [ 316.580527][T10140] netlink: 'syz.2.1478': attribute type 7 has an invalid length. [ 316.615643][T10140] netlink: 'syz.2.1478': attribute type 9 has an invalid length. [ 316.642762][T10140] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 316.654428][T10140] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.1478'. [ 318.011435][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.018796][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.633343][T10251] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1499'. [ 320.202932][T10262] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1505'. [ 320.403839][T10266] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1505'. [ 320.478403][T10270] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1508'. [ 322.462045][T10313] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 322.467763][T10313] dvmrp1: linktype set to 823 [ 323.121992][T10330] sit0: entered allmulticast mode [ 323.279011][T10334] sit0: entered promiscuous mode [ 323.981110][T10342] validate_nla: 11 callbacks suppressed [ 323.981127][T10342] netlink: 'syz.0.1531': attribute type 3 has an invalid length. [ 324.020654][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1531'. [ 324.098853][T10342] netlink: 'syz.0.1531': attribute type 10 has an invalid length. [ 324.138387][T10342] netlink: 'syz.0.1531': attribute type 16 has an invalid length. [ 324.158308][T10342] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1531'. [ 324.198088][T10354] netlink: 'syz.3.1534': attribute type 10 has an invalid length. [ 324.220404][T10354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1534'. [ 324.827115][T10376] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1539'. [ 324.882251][T10376] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1539'. [ 325.466276][T10393] netlink: 'syz.1.1544': attribute type 3 has an invalid length. [ 325.526311][T10393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1544'. [ 325.605049][T10393] netlink: 'syz.1.1544': attribute type 10 has an invalid length. [ 325.614756][T10393] netlink: 'syz.1.1544': attribute type 16 has an invalid length. [ 325.625201][T10393] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1544'. [ 325.769993][T10399] netlink: 'syz.3.1545': attribute type 2 has an invalid length. [ 325.851576][T10399] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 325.945798][T10399] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1545'. [ 326.716783][T10419] netlink: 'syz.0.1550': attribute type 29 has an invalid length. [ 326.862558][T10437] -1: renamed from syzkaller0 (while UP) [ 327.510538][T10445] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1558'. [ 328.404347][T10483] -1: renamed from syzkaller0 (while UP) [ 328.460142][T10481] sit0: entered allmulticast mode [ 328.557319][T10485] sit0: entered promiscuous mode [ 329.852494][T10508] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 330.190769][T10508] syzkaller0: entered promiscuous mode [ 330.198715][T10508] syzkaller0: entered allmulticast mode [ 330.802040][T10529] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1587'. [ 331.473360][T10536] syz.1.1590[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.477111][T10536] syz.1.1590[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.568535][T10568] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1601'. [ 333.873193][T10568] validate_nla: 4 callbacks suppressed [ 333.873209][T10568] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 333.929574][T10568] team0: Device wg1 is of different type [ 334.351076][T10566] delete_channel: no stack [ 334.359663][T10568] syz.0.1601 (10568) used greatest stack depth: 18152 bytes left [ 334.457858][T10581] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 334.488834][T10581] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1603'. [ 335.199019][T10596] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 335.209172][T10596] bridge0: port 3(dummy0) entered disabled state [ 335.215810][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.223384][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.938325][T10616] netlink: 'syz.3.1612': attribute type 10 has an invalid length. [ 335.964334][T10616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1612'. [ 335.993701][T10616] ipvlan1: entered promiscuous mode [ 335.999463][T10616] ipvlan1: entered allmulticast mode [ 336.011297][T10616] veth0_vlan: entered allmulticast mode [ 336.019926][T10616] bridge0: port 3(ipvlan1) entered blocking state [ 336.028338][T10616] bridge0: port 3(ipvlan1) entered disabled state [ 336.042161][T10616] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 336.123734][T10619] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1614'. [ 336.147629][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 338.237467][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1613'. [ 338.253810][T10622] netlink: 'syz.3.1615': attribute type 10 has an invalid length. [ 338.437683][T10629] netlink: 'syz.1.1618': attribute type 3 has an invalid length. [ 338.739315][T10633] veth0_vlan: entered allmulticast mode [ 339.932811][ T5789] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 340.843729][T10678] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1636'. [ 341.299340][T10687] netlink: 'syz.0.1640': attribute type 41 has an invalid length. [ 341.808067][T10702] netlink: 'syz.3.1644': attribute type 2 has an invalid length. [ 342.319205][T10712] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 342.383251][T10712] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1649'. [ 343.477298][T10735] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 343.607589][T10735] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 344.179057][T10753] delete_channel: no stack [ 344.454741][T10763] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1664'. [ 345.010768][T10776] netlink: 'syz.3.1668': attribute type 3 has an invalid length. [ 345.033554][T10776] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1668'. [ 345.194175][T10782] netlink: 'syz.3.1669': attribute type 21 has an invalid length. [ 345.204682][T10782] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1669'. [ 345.232671][T10782] netlink: 'syz.3.1669': attribute type 5 has an invalid length. [ 345.261736][T10782] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1669'. [ 345.712097][T10794] netlink: 'syz.0.1672': attribute type 29 has an invalid length. [ 345.763706][T10794] netlink: 'syz.0.1672': attribute type 29 has an invalid length. [ 345.877508][T10796] netlink: 'syz.0.1672': attribute type 29 has an invalid length. [ 347.576337][T10817] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1674'. [ 347.910673][T10817] macsec0: entered allmulticast mode [ 348.287526][T10843] netlink: 'syz.1.1683': attribute type 21 has an invalid length. [ 348.299520][T10843] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.307994][T10843] IPv6: Can't replace route, no match found [ 348.532536][T10847] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1685'. [ 348.561485][T10847] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.1685'. [ 348.660453][T10850] netlink: 'syz.2.1686': attribute type 21 has an invalid length. [ 348.669238][T10850] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1686'. [ 348.700516][T10850] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1686'. [ 349.787267][T10860] netlink: 'syz.0.1690': attribute type 10 has an invalid length. [ 349.797315][T10860] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1690'. [ 349.816962][T10860] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 353.219502][T10860] batman_adv: batadv0: Removing interface: veth0_vlan [ 353.592323][T10894] netlink: 'syz.3.1697': attribute type 29 has an invalid length. [ 353.625044][T10894] netlink: 'syz.3.1697': attribute type 29 has an invalid length. [ 353.647175][T10891] netlink: 'syz.3.1697': attribute type 29 has an invalid length. [ 354.659960][T10930] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1709'. [ 355.304831][T10944] netlink: 'syz.1.1716': attribute type 13 has an invalid length. [ 355.345545][T10944] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.1716'. [ 355.374578][T10946] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1717'. [ 355.592211][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.602388][T10953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.620787][T10953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.629499][T10953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.646828][T10953] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 355.656701][T10953] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 355.675379][T10953] batman_adv: batadv0: Removing interface: netdevsim0 [ 356.793714][T10971] syzkaller0: entered promiscuous mode [ 356.799240][T10971] syzkaller0: entered allmulticast mode [ 356.931057][T10979] syzkaller1: entered promiscuous mode [ 356.936644][T10979] syzkaller1: entered allmulticast mode [ 357.032800][T10985] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 357.217734][T10990] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1732'. [ 357.449515][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1734'. [ 357.733805][T11000] netlink: 'syz.2.1736': attribute type 3 has an invalid length. [ 357.750771][T11000] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1736'. [ 357.775831][T11003] netlink: 64519 bytes leftover after parsing attributes in process `syz.1.1737'. [ 358.531119][T11016] netlink: 'syz.0.1743': attribute type 9 has an invalid length. [ 358.558568][T11016] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1743'. [ 358.660796][T11019] netlink: 'syz.3.1741': attribute type 13 has an invalid length. [ 358.697829][T11019] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1741'. [ 358.838433][T11019] netlink: 'syz.3.1741': attribute type 6 has an invalid length. [ 358.900356][T11019] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1741'. [ 360.193707][T11066] __nla_validate_parse: 2 callbacks suppressed [ 360.193724][T11066] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1757'. [ 360.287113][T11064] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1756'. [ 360.412991][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 360.491087][T11078] netlink: 'syz.1.1762': attribute type 3 has an invalid length. [ 360.499064][T11078] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 360.554462][T11080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1763'. [ 360.826722][T11087] netlink: 'syz.0.1766': attribute type 10 has an invalid length. [ 360.837405][T11087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1766'. [ 360.847431][T11087] team0: entered promiscuous mode [ 360.854860][T11087] C: entered promiscuous mode [ 360.861193][T11087] team_slave_1: entered promiscuous mode [ 360.867164][T11087] geneve1: entered promiscuous mode [ 360.873690][T11087] bridge0: port 3(team0) entered blocking state [ 360.880959][T11087] bridge0: port 3(team0) entered disabled state [ 360.887723][T11087] team0: entered allmulticast mode [ 360.893451][T11087] C: entered allmulticast mode [ 360.898582][T11087] team_slave_1: entered allmulticast mode [ 360.905177][T11087] geneve1: entered allmulticast mode [ 360.915089][T11087] bridge0: port 3(team0) entered blocking state [ 360.921660][T11087] bridge0: port 3(team0) entered forwarding state [ 360.992957][T11092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.028653][T11093] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1767'. [ 361.039479][T11093] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 361.186893][T11097] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1769'. [ 361.424715][T11104] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1772'. [ 361.435881][T11104] openvswitch: netlink: Duplicate key (type 0). [ 362.917499][T11124] netlink: 'syz.0.1779': attribute type 10 has an invalid length. [ 362.942737][T11124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1779'. [ 362.996747][T11124] batman_adv: batadv0: Adding interface: virt_wifi0 [ 363.026560][T11124] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.103018][T11124] batman_adv: batadv0: Interface activated: virt_wifi0 [ 363.443160][T11134] netlink: 'syz.3.1783': attribute type 1 has an invalid length. [ 363.460514][T11134] netlink: 'syz.3.1783': attribute type 2 has an invalid length. [ 363.468504][T11134] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.1783'. [ 363.755836][T11139] netlink: 'syz.1.1785': attribute type 10 has an invalid length. [ 364.898306][T11171] syzkaller0: entered promiscuous mode [ 364.903990][T11171] syzkaller0: entered allmulticast mode [ 364.931132][T11170] team0: left allmulticast mode [ 364.936308][T11170] C: left allmulticast mode [ 364.944361][T11170] team_slave_1: left allmulticast mode [ 364.989019][T11170] geneve1: left allmulticast mode [ 365.003373][T11170] bridge0: port 3(team0) entered disabled state [ 365.024092][T11170] bridge_slave_1: left allmulticast mode [ 365.029982][T11170] bridge_slave_1: left promiscuous mode [ 365.044034][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.115686][T11170] bridge_slave_0: left allmulticast mode [ 365.150810][T11170] bridge_slave_0: left promiscuous mode [ 365.177617][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.288807][T11183] netlink: 'syz.3.1800': attribute type 9 has an invalid length. [ 365.305591][T11183] __nla_validate_parse: 4 callbacks suppressed [ 365.305608][T11183] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1800'. [ 365.875040][T11186] netlink: 'syz.3.1800': attribute type 9 has an invalid length. [ 365.930385][T11186] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1800'. [ 369.511219][T11214] netlink: 'syz.1.1810': attribute type 3 has an invalid length. [ 369.540099][T11214] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 369.550320][T11214] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1810'. [ 370.783513][T11224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1813'. [ 372.150283][T11224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1813'. [ 372.242717][T11227] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1814'. [ 372.324778][T11227] bridge0: port 3(dummy0) entered disabled state [ 372.367907][T11227] bridge_slave_1: left allmulticast mode [ 372.405119][T11227] bridge_slave_1: left promiscuous mode [ 372.421238][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.451852][T11227] bridge_slave_0: left promiscuous mode [ 372.497327][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.579731][T11227] bond0: (slave bridge0): Releasing backup interface [ 372.619983][T11244] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1819'. [ 372.700690][T11235] netlink: 'syz.0.1815': attribute type 11 has an invalid length. [ 372.708566][T11235] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1815'. [ 372.733254][T11244] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1819'. [ 373.683213][T11260] netlink: 'syz.0.1824': attribute type 17 has an invalid length. [ 373.695044][T11260] netlink: 'syz.0.1824': attribute type 16 has an invalid length. [ 373.705227][T11260] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1824'. [ 373.746386][T11262] netlink: 'syz.0.1824': attribute type 46 has an invalid length. [ 374.486337][T11276] netlink: 'syz.1.1830': attribute type 8 has an invalid length. [ 374.500872][T11276] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1830'. [ 376.452432][T11291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 376.470511][T11295] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 376.490351][T11291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 376.512436][T11290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1836'. [ 377.190093][T11285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.299127][T11339] netlink: 'syz.3.1850': attribute type 29 has an invalid length. [ 378.308072][T11339] netlink: 'syz.3.1850': attribute type 29 has an invalid length. [ 378.321714][T11339] netlink: 'syz.3.1850': attribute type 29 has an invalid length. [ 378.362298][T11339] netlink: 'syz.3.1850': attribute type 29 has an invalid length. [ 378.410489][T11340] netlink: 'syz.3.1850': attribute type 29 has an invalid length. [ 378.452546][T11344] tap0: tun_chr_ioctl cmd 1074025694 [ 378.471128][T11344] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1852'. [ 379.364280][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.370744][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.734350][T11364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1857'. [ 381.058167][T11395] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1867'. [ 381.080922][T11397] netlink: 'syz.3.1868': attribute type 17 has an invalid length. [ 381.111027][T11397] netlink: 'syz.3.1868': attribute type 16 has an invalid length. [ 381.118980][T11397] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1868'. [ 381.147789][T11395] sit0: entered allmulticast mode [ 381.205650][T11399] sit0: entered promiscuous mode [ 381.254416][T11400] netlink: 'syz.3.1868': attribute type 21 has an invalid length. [ 381.266710][T11400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1868'. [ 381.897482][T11420] netlink: 'syz.3.1876': attribute type 3 has an invalid length. [ 381.940710][T11420] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1876'. [ 381.975701][T11424] netlink: 'syz.1.1875': attribute type 2 has an invalid length. [ 382.006205][T11424] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1875'. [ 382.868115][T11446] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1881'. [ 383.713767][T11448] bridge0: port 4(dummy0) entered disabled state [ 383.769496][T11448] bridge_slave_1: left allmulticast mode [ 383.799895][T11448] bridge_slave_1: left promiscuous mode [ 383.834855][T11448] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.906999][T11448] bridge_slave_0: left allmulticast mode [ 383.918783][T11448] bridge_slave_0: left promiscuous mode [ 383.942230][T11448] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.132459][T11502] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1896'. [ 385.460070][T11512] validate_nla: 2 callbacks suppressed [ 385.460093][T11512] netlink: 'syz.0.1900': attribute type 29 has an invalid length. [ 385.478636][T11512] netlink: 'syz.0.1900': attribute type 29 has an invalid length. [ 385.502662][T11512] netlink: 'syz.0.1900': attribute type 29 has an invalid length. [ 385.514282][T11512] netlink: 'syz.0.1900': attribute type 29 has an invalid length. [ 385.530067][T11512] netlink: 'syz.0.1900': attribute type 29 has an invalid length. [ 387.006882][T11552] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1911'. [ 388.514639][T11597] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1926'. [ 388.601190][T11600] netlink: 'syz.3.1927': attribute type 27 has an invalid length. [ 388.635950][T11600] netlink: 'syz.3.1927': attribute type 4 has an invalid length. [ 388.702231][T11598] netlink: 'syz.3.1927': attribute type 3 has an invalid length. [ 388.741455][T11600] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1927'. [ 388.931060][T11606] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1929'. [ 389.209383][T11614] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1932'. [ 389.504306][T11617] ªªªªªª: renamed from vlan0 (while UP) [ 389.676998][T11625] netlink: 'syz.1.1937': attribute type 2 has an invalid length. [ 390.415379][T11667] ªªªªªª: renamed from vlan0 (while UP) [ 390.741336][T11686] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1953'. [ 391.372035][T11709] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.1959'. [ 391.388347][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'. [ 391.622623][T11716] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1962'. [ 392.224033][T11739] netlink: 'syz.2.1967': attribute type 7 has an invalid length. [ 392.652381][T11746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1970'. [ 392.691824][T11746] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1970'. [ 392.726379][T11746] bridge_slave_0: entered allmulticast mode [ 392.743495][T11746] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1970'. [ 393.398095][T11770] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 393.421407][T11770] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1979'. [ 393.592660][T11776] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 393.618535][T11776] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 393.639021][T11776] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 393.657203][T11777] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 393.683024][T11776] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 393.704400][T11777] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 394.008919][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1985'. [ 394.121078][T11787] netlink: 'syz.0.1980': attribute type 10 has an invalid length. [ 394.131073][T11787] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1980'. [ 394.729137][T11807] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1988'. [ 394.835990][T11787] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 395.245476][T11811] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 395.274056][T11787] batman_adv: batadv0: Removing interface: virt_wifi0 [ 395.290747][T11811] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1989'. [ 395.913784][T11823] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1994'. [ 395.997644][T11820] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1993'. [ 396.389475][T11828] wg1: entered promiscuous mode [ 396.397959][T11828] team0: Device wg1 is of different type [ 396.717281][T11839] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 398.065561][T11872] __nla_validate_parse: 6 callbacks suppressed [ 398.065578][T11872] netlink: 8831 bytes leftover after parsing attributes in process `syz.1.2011'. [ 398.453868][T11889] syzkaller0: entered promiscuous mode [ 398.459671][T11889] syzkaller0: entered allmulticast mode [ 398.477814][T11889] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2015'. [ 398.732050][T11894] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2016'. [ 399.225813][T11898] validate_nla: 9 callbacks suppressed [ 399.225831][T11898] netlink: 'syz.0.2017': attribute type 1 has an invalid length. [ 399.262180][T11898] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2017'. [ 399.733239][T11912] netlink: 'syz.0.2021': attribute type 3 has an invalid length. [ 399.786820][T11912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2021'. [ 399.903524][T11912] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 402.210702][T11927] netlink: 'syz.0.2026': attribute type 29 has an invalid length. [ 402.511464][T11927] netlink: 'syz.0.2026': attribute type 29 has an invalid length. [ 402.546072][T11928] netlink: 'syz.0.2026': attribute type 29 has an invalid length. [ 402.580586][T11929] netlink: 'syz.0.2026': attribute type 29 has an invalid length. [ 402.683285][T11935] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2028'. [ 403.304131][T11952] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2033'. [ 403.747746][T11963] netlink: 'syz.3.2036': attribute type 49 has an invalid length. [ 403.763619][T11963] netlink: 'syz.3.2036': attribute type 49 has an invalid length. [ 403.811917][T11965] netlink: 64835 bytes leftover after parsing attributes in process `syz.2.2038'. [ 404.075574][T11975] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2042'. [ 404.117793][T11978] netlink: 'syz.0.2043': attribute type 3 has an invalid length. [ 404.173921][T11978] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2043'. [ 405.328770][T12010] netlink: 'syz.1.2054': attribute type 1 has an invalid length. [ 405.351363][T12010] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2054'. [ 408.173091][T12047] netlink: 'syz.0.2066': attribute type 1 has an invalid length. [ 408.211550][T12047] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2066'. [ 409.063866][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 409.114710][T12081] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 409.150418][T12081] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2075'. [ 409.257134][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'. [ 409.588485][T12065] netlink: 'syz.3.2072': attribute type 10 has an invalid length. [ 409.689241][T12093] netlink: 'syz.1.2079': attribute type 1 has an invalid length. [ 409.704642][T12093] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2079'. [ 410.169388][T12112] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 410.203284][T12112] netlink: 'syz.1.2087': attribute type 2 has an invalid length. [ 410.233867][T12112] netlink: 'syz.1.2087': attribute type 2 has an invalid length. [ 410.254319][T12112] netlink: 'syz.1.2087': attribute type 3 has an invalid length. [ 410.270555][T12112] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 410.288215][T12112] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.2087'. [ 410.391931][T12125] validate_nla: 7 callbacks suppressed [ 410.391949][T12125] netlink: 'syz.3.2089': attribute type 1 has an invalid length. [ 410.411297][T12125] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2089'. [ 411.083119][T12137] netlink: 'syz.2.2091': attribute type 10 has an invalid length. [ 411.133300][T12137] team0: Device ipvlan1 failed to register rx_handler [ 411.403823][T12159] netlink: 'syz.2.2098': attribute type 3 has an invalid length. [ 411.420306][T12159] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2098'. [ 411.501402][T12163] netlink: 'syz.0.2099': attribute type 1 has an invalid length. [ 411.525433][T12163] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2099'. [ 412.395685][T12184] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2106'. [ 412.431153][T12184] netlink: zone id is out of range [ 412.446148][T12184] netlink: zone id is out of range [ 412.470471][T12184] netlink: zone id is out of range [ 412.476032][T12184] netlink: zone id is out of range [ 412.522809][T12184] netlink: zone id is out of range [ 412.528224][T12184] netlink: zone id is out of range [ 412.610482][T12184] netlink: zone id is out of range [ 412.618362][T12184] netlink: zone id is out of range [ 412.626975][T12184] netlink: zone id is out of range [ 412.675045][T12184] netlink: zone id is out of range [ 412.693117][T12191] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 412.716763][T12191] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2109'. [ 413.001655][T12209] netlink: 'syz.3.2115': attribute type 3 has an invalid length. [ 413.258752][T12204] netlink: 'syz.2.2114': attribute type 28 has an invalid length. [ 413.270041][T12204] netlink: 'syz.2.2114': attribute type 29 has an invalid length. [ 413.709024][T12221] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 415.533830][T12260] netlink: 'syz.1.2133': attribute type 33 has an invalid length. [ 415.560467][T12260] __nla_validate_parse: 4 callbacks suppressed [ 415.560550][T12260] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2133'. [ 415.598110][T12262] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 415.610380][T12259] netlink: 'syz.1.2133': attribute type 33 has an invalid length. [ 415.638218][T12262] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2134'. [ 415.650549][T12259] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2133'. [ 416.118963][T12275] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2139'. [ 416.148960][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2139'. [ 416.352581][T12279] netlink: 'syz.3.2139': attribute type 10 has an invalid length. [ 416.380581][T12279] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2139'. [ 417.042697][T12291] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 417.058762][T12291] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2144'. [ 417.142690][T12279] veth1_vlan (unregistering): left allmulticast mode [ 417.207332][T12279] bond0: (slave macvlan0): Releasing backup interface [ 417.433951][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'. [ 418.255002][T12312] netlink: 'syz.2.2152': attribute type 1 has an invalid length. [ 418.278207][T12312] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2152'. [ 418.314116][T12314] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 418.324261][T12314] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2153'. [ 419.022479][T12344] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 419.227519][T12358] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 419.327013][T12363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 419.968487][T12379] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 420.841645][T12410] netlink: 'syz.3.2183': attribute type 10 has an invalid length. [ 420.922735][T12410] veth0_macvtap: left promiscuous mode [ 421.418455][T12422] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 421.451624][T12422] __nla_validate_parse: 4 callbacks suppressed [ 421.451644][T12422] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2186'. [ 423.494520][T12445] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2195'. [ 423.580595][T12445] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2195'. [ 423.688237][T12452] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 423.696941][T12452] netlink: 'syz.3.2197': attribute type 3 has an invalid length. [ 423.705048][T12452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2197'. [ 423.894083][T12456] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2198'. [ 423.957620][T12455] netlink: 'syz.3.2197': attribute type 39 has an invalid length. [ 424.041985][T12461] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2200'. [ 424.066495][T12459] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 424.077807][T12459] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2199'. [ 424.195863][T12467] netlink: 'syz.0.2203': attribute type 2 has an invalid length. [ 424.209993][T12467] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 424.279194][T12470] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 424.339595][T12470] netlink: 'syz.2.2204': attribute type 9 has an invalid length. [ 424.349674][T12470] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2204'. [ 424.734319][T12489] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2209'. [ 425.034171][T12492] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2211'. [ 426.866410][T12547] validate_nla: 4 callbacks suppressed [ 426.866424][T12547] netlink: 'syz.0.2230': attribute type 46 has an invalid length. [ 426.874287][T12549] netlink: 'syz.1.2229': attribute type 3 has an invalid length. [ 426.882431][T12547] netlink: 'syz.0.2230': attribute type 46 has an invalid length. [ 426.896176][T12549] __nla_validate_parse: 1 callbacks suppressed [ 426.896195][T12549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2229'. [ 426.917052][T12549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2229'. [ 426.946279][T12549] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2229'. [ 426.965783][T12547] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2230'. [ 427.073238][T12556] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 427.084846][T12556] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2232'. [ 427.417200][T12565] netlink: 'syz.1.2234': attribute type 29 has an invalid length. [ 430.046990][T12565] netlink: 'syz.1.2234': attribute type 29 has an invalid length. [ 430.309562][T12574] netlink: 'syz.2.2237': attribute type 29 has an invalid length. [ 430.369192][T12574] netlink: 'syz.2.2237': attribute type 29 has an invalid length. [ 430.386861][T12576] netlink: 'syz.2.2237': attribute type 29 has an invalid length. [ 430.399089][T12574] netlink: 'syz.2.2237': attribute type 29 has an invalid length. [ 430.618196][T12584] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2241'. [ 430.640833][T12586] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2242'. [ 430.762879][T12589] FAULT_INJECTION: forcing a failure. [ 430.762879][T12589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.776336][T12589] CPU: 0 PID: 12589 Comm: syz.3.2243 Not tainted syzkaller #0 [ 430.783838][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.793920][T12589] Call Trace: [ 430.797208][T12589] [ 430.800143][T12589] dump_stack_lvl+0x18c/0x250 [ 430.804852][T12589] ? show_regs_print_info+0x20/0x20 [ 430.810231][T12589] ? load_image+0x420/0x420 [ 430.814920][T12589] ? __might_fault+0xaa/0x120 [ 430.819619][T12589] ? __lock_acquire+0x7d40/0x7d40 [ 430.824655][T12589] should_fail_ex+0x39d/0x4d0 [ 430.829348][T12589] _copy_from_user+0x2f/0xe0 [ 430.833947][T12589] __sys_bpf+0x23e/0x890 [ 430.838195][T12589] ? bpf_link_show_fdinfo+0x390/0x390 [ 430.843580][T12589] ? lock_chain_count+0x20/0x20 [ 430.848447][T12589] __x64_sys_bpf+0x7c/0x90 [ 430.852875][T12589] do_syscall_64+0x55/0xb0 [ 430.857298][T12589] ? clear_bhb_loop+0x40/0x90 [ 430.862084][T12589] ? clear_bhb_loop+0x40/0x90 [ 430.866768][T12589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.872679][T12589] RIP: 0033:0x7fd7cbf9ce59 [ 430.877124][T12589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.896740][T12589] RSP: 002b:00007fd7ccf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.905166][T12589] RAX: ffffffffffffffda RBX: 00007fd7cc215fa0 RCX: 00007fd7cbf9ce59 [ 430.913322][T12589] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 430.921297][T12589] RBP: 00007fd7ccf05090 R08: 0000000000000000 R09: 0000000000000000 [ 430.929284][T12589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.937262][T12589] R13: 00007fd7cc216038 R14: 00007fd7cc215fa0 R15: 00007fffb7207eb8 [ 430.945444][T12589] [ 430.977356][T12586] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2242'. [ 431.012164][T12591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2244'. [ 431.357448][T12613] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2250'. [ 431.369644][T12613] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 431.643552][T12620] FAULT_INJECTION: forcing a failure. [ 431.643552][T12620] name failslab, interval 1, probability 0, space 0, times 0 [ 431.658311][T12620] CPU: 0 PID: 12620 Comm: syz.3.2253 Not tainted syzkaller #0 [ 431.665827][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.675918][T12620] Call Trace: [ 431.679399][T12620] [ 431.682346][T12620] dump_stack_lvl+0x18c/0x250 [ 431.687656][T12620] ? show_regs_print_info+0x20/0x20 [ 431.694242][T12620] ? load_image+0x420/0x420 [ 431.699611][T12620] ? __might_sleep+0xe0/0xe0 [ 431.704535][T12620] ? __lock_acquire+0x7d40/0x7d40 [ 431.709790][T12620] ? mark_lock+0x94/0x320 [ 431.714151][T12620] should_fail_ex+0x39d/0x4d0 [ 431.718955][T12620] should_failslab+0x9/0x20 [ 431.723483][T12620] slab_pre_alloc_hook+0x59/0x310 [ 431.728528][T12620] ? __get_vm_area_node+0x125/0x370 [ 431.733737][T12620] __kmem_cache_alloc_node+0x53/0x250 [ 431.739123][T12620] ? __get_vm_area_node+0x125/0x370 [ 431.744331][T12620] kmalloc_node_trace+0x26/0xe0 [ 431.749202][T12620] __get_vm_area_node+0x125/0x370 [ 431.754241][T12620] __vmalloc_node_range+0x36e/0x1330 [ 431.759536][T12620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 431.765096][T12620] ? mark_lock+0x94/0x320 [ 431.769440][T12620] ? __lock_acquire+0x1347/0x7d40 [ 431.774479][T12620] ? verify_lock_unused+0x140/0x140 [ 431.779865][T12620] ? free_vm_area+0x50/0x50 [ 431.784407][T12620] ? end_current_label_crit_section+0x170/0x170 [ 431.790769][T12620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 431.796344][T12620] __vmalloc+0x7a/0x90 [ 431.800422][T12620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 431.805975][T12620] bpf_prog_alloc_no_stats+0x47/0x440 [ 431.811364][T12620] ? bpf_prog_alloc+0x2b/0x1a0 [ 431.816146][T12620] bpf_prog_alloc+0x3d/0x1a0 [ 431.820744][T12620] bpf_prog_load+0x6eb/0x1670 [ 431.825464][T12620] ? map_freeze+0x420/0x420 [ 431.829986][T12620] ? __might_fault+0xaa/0x120 [ 431.834667][T12620] ? __lock_acquire+0x7d40/0x7d40 [ 431.839696][T12620] ? file_end_write+0x159/0x250 [ 431.844558][T12620] ? __might_fault+0xaa/0x120 [ 431.849245][T12620] ? __might_fault+0xc6/0x120 [ 431.854007][T12620] ? __might_fault+0xaa/0x120 [ 431.858689][T12620] ? bpf_lsm_bpf+0x9/0x10 [ 431.863021][T12620] ? security_bpf+0x7e/0xa0 [ 431.867535][T12620] __sys_bpf+0x5ba/0x890 [ 431.871789][T12620] ? bpf_link_show_fdinfo+0x390/0x390 [ 431.877298][T12620] ? lock_chain_count+0x20/0x20 [ 431.882333][T12620] __x64_sys_bpf+0x7c/0x90 [ 431.886885][T12620] do_syscall_64+0x55/0xb0 [ 431.891329][T12620] ? clear_bhb_loop+0x40/0x90 [ 431.896011][T12620] ? clear_bhb_loop+0x40/0x90 [ 431.900689][T12620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.906597][T12620] RIP: 0033:0x7fd7cbf9ce59 [ 431.911021][T12620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.930637][T12620] RSP: 002b:00007fd7ccf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.939059][T12620] RAX: ffffffffffffffda RBX: 00007fd7cc215fa0 RCX: 00007fd7cbf9ce59 [ 431.947035][T12620] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 431.955011][T12620] RBP: 00007fd7ccf05090 R08: 0000000000000000 R09: 0000000000000000 [ 431.963086][T12620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.971072][T12620] R13: 00007fd7cc216038 R14: 00007fd7cc215fa0 R15: 00007fffb7207eb8 [ 431.979147][T12620] [ 431.990403][T12620] syz.3.2253: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 432.008892][T12620] CPU: 1 PID: 12620 Comm: syz.3.2253 Not tainted syzkaller #0 [ 432.016408][T12620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.026485][T12620] Call Trace: [ 432.029787][T12620] [ 432.032737][T12620] dump_stack_lvl+0x18c/0x250 [ 432.037448][T12620] ? show_regs_print_info+0x20/0x20 [ 432.042678][T12620] ? load_image+0x420/0x420 [ 432.047222][T12620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 432.053671][T12620] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 432.060211][T12620] warn_alloc+0x246/0x340 [ 432.064591][T12620] ? __get_vm_area_node+0x125/0x370 [ 432.069837][T12620] ? zone_watermark_ok_safe+0x230/0x230 [ 432.075510][T12620] ? rcu_is_watching+0x15/0xb0 [ 432.080319][T12620] ? __get_vm_area_node+0x356/0x370 [ 432.085556][T12620] __vmalloc_node_range+0x393/0x1330 [ 432.090888][T12620] ? mark_lock+0x94/0x320 [ 432.095257][T12620] ? __lock_acquire+0x1347/0x7d40 [ 432.100335][T12620] ? verify_lock_unused+0x140/0x140 [ 432.105583][T12620] ? free_vm_area+0x50/0x50 [ 432.110120][T12620] ? end_current_label_crit_section+0x170/0x170 [ 432.116414][T12620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 432.121990][T12620] __vmalloc+0x7a/0x90 [ 432.126062][T12620] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 432.131602][T12620] bpf_prog_alloc_no_stats+0x47/0x440 [ 432.136984][T12620] ? bpf_prog_alloc+0x2b/0x1a0 [ 432.141744][T12620] bpf_prog_alloc+0x3d/0x1a0 [ 432.146388][T12620] bpf_prog_load+0x6eb/0x1670 [ 432.151113][T12620] ? map_freeze+0x420/0x420 [ 432.152658][T12625] __nla_validate_parse: 1 callbacks suppressed [ 432.152670][T12625] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2254'. [ 432.155634][T12620] ? __might_fault+0xaa/0x120 [ 432.175684][T12620] ? __lock_acquire+0x7d40/0x7d40 [ 432.181084][T12620] ? file_end_write+0x159/0x250 [ 432.185958][T12620] ? __might_fault+0xaa/0x120 [ 432.190833][T12620] ? __might_fault+0xc6/0x120 [ 432.195542][T12620] ? __might_fault+0xaa/0x120 [ 432.200236][T12620] ? bpf_lsm_bpf+0x9/0x10 [ 432.204764][T12620] ? security_bpf+0x7e/0xa0 [ 432.209291][T12620] __sys_bpf+0x5ba/0x890 [ 432.213554][T12620] ? bpf_link_show_fdinfo+0x390/0x390 [ 432.218967][T12620] ? lock_chain_count+0x20/0x20 [ 432.223849][T12620] __x64_sys_bpf+0x7c/0x90 [ 432.228292][T12620] do_syscall_64+0x55/0xb0 [ 432.232737][T12620] ? clear_bhb_loop+0x40/0x90 [ 432.237728][T12620] ? clear_bhb_loop+0x40/0x90 [ 432.242457][T12620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.248562][T12620] RIP: 0033:0x7fd7cbf9ce59 [ 432.253000][T12620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.272646][T12620] RSP: 002b:00007fd7ccf05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.281099][T12620] RAX: ffffffffffffffda RBX: 00007fd7cc215fa0 RCX: 00007fd7cbf9ce59 [ 432.289106][T12620] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 432.297102][T12620] RBP: 00007fd7ccf05090 R08: 0000000000000000 R09: 0000000000000000 [ 432.305107][T12620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.313099][T12620] R13: 00007fd7cc216038 R14: 00007fd7cc215fa0 R15: 00007fffb7207eb8 [ 432.321106][T12620] [ 432.374810][T12620] Mem-Info: [ 432.378067][T12620] active_anon:14029 inactive_anon:0 isolated_anon:0 [ 432.378067][T12620] active_file:17915 inactive_file:40084 isolated_file:0 [ 432.378067][T12620] unevictable:768 dirty:207 writeback:0 [ 432.378067][T12620] slab_reclaimable:10420 slab_unreclaimable:100474 [ 432.378067][T12620] mapped:24443 shmem:1361 pagetables:586 [ 432.378067][T12620] sec_pagetables:0 bounce:0 [ 432.378067][T12620] kernel_misc_reclaimable:0 [ 432.378067][T12620] free:1327478 free_pcp:14207 free_cma:0 [ 432.510343][T12620] Node 0 active_anon:56116kB inactive_anon:0kB active_file:71660kB inactive_file:160136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97772kB dirty:828kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11696kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no [ 432.554854][T12620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 432.613434][T12620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.641684][T12620] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 432.647501][T12620] Node 0 DMA32 free:1426036kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:56000kB inactive_anon:0kB active_file:71660kB inactive_file:159304kB unevictable:1536kB writepending:828kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:20992kB local_pcp:6840kB free_cma:0kB [ 432.767971][T12620] lowmem_reserve[]: 0 0 0 0 0 [ 432.780652][T12620] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.850244][T12620] lowmem_reserve[]: 0 0 0 0 0 [ 432.855079][T12620] Node 1 Normal free:3889212kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22448kB local_pcp:11272kB free_cma:0kB [ 432.941757][T12620] lowmem_reserve[]: 0 0 0 0 0 [ 432.946701][T12620] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 432.997103][T12620] Node 0 DMA32: 403*4kB (UM) 182*8kB (UM) 1200*16kB (UME) 1212*32kB (UME) 1770*64kB (UM) 774*128kB (UME) 309*256kB (UM) 115*512kB (UM) 36*1024kB (UM) 3*2048kB (UME) 237*4096kB (M) = 1425148kB [ 433.047431][T12643] validate_nla: 6 callbacks suppressed [ 433.047448][T12643] netlink: 'syz.1.2257': attribute type 3 has an invalid length. [ 433.061097][T12620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 433.062155][T12643] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2257'. [ 433.098166][T12620] Node 1 Normal: 165*4kB (UME) 69*8kB (UME) 40*16kB (UME) 70*32kB (UME) 15*64kB (UME) 7*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889212kB [ 433.128420][T12620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.142693][T12620] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 433.164791][T12620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.175971][T12620] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 433.186668][T12620] 59360 total pagecache pages [ 433.195607][T12620] 0 pages in swap cache [ 433.204192][T12620] Free swap = 124996kB [ 433.212226][T12620] Total swap = 124996kB [ 433.246405][T12620] 2097051 pages RAM [ 433.301582][T12620] 0 pages HighMem/MovableOnly [ 433.306317][T12620] 416933 pages reserved [ 433.327157][T12651] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 433.341411][T12620] 0 pages cma reserved [ 433.350613][T12651] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2262'. [ 433.639276][T12667] syz.2.2268[12667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.640618][T12667] syz.2.2268[12667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.864465][T12671] netlink: 'syz.1.2270': attribute type 64 has an invalid length. [ 433.994614][T12677] netlink: 'syz.3.2273': attribute type 1 has an invalid length. [ 434.030764][T12677] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2273'. [ 434.539353][T12685] netlink: 'syz.2.2271': attribute type 10 has an invalid length. [ 434.570450][T12685] team0: Port device hsr_slave_0 added [ 434.696892][T12693] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2279'. [ 434.720391][T12691] netlink: 'syz.1.2278': attribute type 64 has an invalid length. [ 434.998718][T12700] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 435.015120][T12700] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2282'. [ 435.051179][T12702] netlink: 'syz.1.2283': attribute type 1 has an invalid length. [ 435.069442][T12702] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2283'. [ 435.266892][T12711] netlink: 'syz.1.2286': attribute type 8 has an invalid length. [ 435.280427][T12711] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2286'. [ 435.484474][T12711] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2286'. [ 435.600918][T12725] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2289'. [ 436.116173][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.130651][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.150609][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.170524][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.179148][T12730] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 436.187886][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 436.195091][T12728] netlink: 'syz.0.2292': attribute type 11 has an invalid length. [ 436.203856][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.242522][T12728] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 436.301902][T12728] CPU: 1 PID: 12728 Comm: syz.0.2292 Not tainted syzkaller #0 [ 436.309455][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.319564][T12728] Call Trace: [ 436.322888][T12728] [ 436.325868][T12728] dump_stack_lvl+0x18c/0x250 [ 436.330631][T12728] ? show_regs_print_info+0x20/0x20 [ 436.335901][T12728] ? load_image+0x420/0x420 [ 436.340518][T12728] sysfs_warn_dup+0x8e/0xa0 [ 436.345128][T12728] sysfs_do_create_link_sd+0xc0/0x110 [ 436.350563][T12728] device_add_class_symlinks+0x1cf/0x240 [ 436.356333][T12728] device_add+0x507/0xc50 [ 436.360743][T12728] wiphy_register+0x1dad/0x2ae0 [ 436.365847][T12728] ? cfg80211_event_work+0x40/0x40 [ 436.371034][T12728] ? minstrel_ht_alloc+0x88a/0x990 [ 436.376329][T12728] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 436.382588][T12728] ieee80211_register_hw+0x3464/0x4250 [ 436.388267][T12728] ? ieee80211_tasklet_handler+0x20/0x20 [ 436.393958][T12728] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 436.400014][T12728] ? __debug_object_init+0xec/0x450 [ 436.405293][T12728] ? __asan_memset+0x22/0x40 [ 436.409951][T12728] ? __hrtimer_init+0x186/0x270 [ 436.414863][T12728] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 436.420717][T12728] ? mac80211_hwsim_free+0x220/0x220 [ 436.426029][T12728] ? rcu_is_watching+0x15/0xb0 [ 436.430826][T12728] ? kstrndup+0xbd/0x140 [ 436.435150][T12728] hwsim_new_radio_nl+0xdc9/0x1a90 [ 436.440343][T12728] ? __nla_validate+0x50/0x50 [ 436.445085][T12728] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 436.451472][T12728] ? __nla_parse+0x40/0x50 [ 436.455920][T12728] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 436.462328][T12728] genl_family_rcv_msg_doit+0x211/0x310 [ 436.467912][T12728] ? end_current_label_crit_section+0x170/0x170 [ 436.474205][T12728] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 436.480150][T12728] ? bpf_lsm_capable+0x9/0x10 [ 436.484869][T12728] ? security_capable+0x89/0xb0 [ 436.489773][T12728] genl_rcv_msg+0x619/0x7a0 [ 436.494339][T12728] ? genl_bind+0x360/0x360 [ 436.498781][T12728] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 436.505140][T12728] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 436.511765][T12728] ? ref_tracker_free+0x690/0x840 [ 436.516841][T12728] netlink_rcv_skb+0x241/0x4d0 [ 436.521634][T12728] ? genl_bind+0x360/0x360 [ 436.526088][T12728] ? netlink_ack+0x1180/0x1180 [ 436.530913][T12728] ? __lock_acquire+0x7d40/0x7d40 [ 436.535984][T12728] ? down_read+0x1ac/0x2e0 [ 436.540432][T12728] genl_rcv+0x28/0x40 [ 436.544434][T12728] netlink_unicast+0x751/0x8d0 [ 436.549250][T12728] netlink_sendmsg+0x8d0/0xbf0 [ 436.554058][T12728] ? netlink_getsockopt+0x590/0x590 [ 436.559298][T12728] ? aa_sock_msg_perm+0x94/0x150 [ 436.564267][T12728] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 436.569577][T12728] ? security_socket_sendmsg+0x80/0xa0 [ 436.575067][T12728] ? netlink_getsockopt+0x590/0x590 [ 436.580295][T12728] ____sys_sendmsg+0x5ba/0x960 [ 436.585278][T12728] ? __asan_memset+0x22/0x40 [ 436.589905][T12728] ? __sys_sendmsg_sock+0x30/0x30 [ 436.594950][T12728] ? __import_iovec+0x5f2/0x850 [ 436.599854][T12728] ? import_iovec+0x73/0xa0 [ 436.604390][T12728] ___sys_sendmsg+0x2a6/0x360 [ 436.609107][T12728] ? __sys_sendmsg+0x2a0/0x2a0 [ 436.614042][T12728] __se_sys_sendmsg+0x1c2/0x2b0 [ 436.618938][T12728] ? __x64_sys_sendmsg+0x80/0x80 [ 436.623948][T12728] ? lockdep_hardirqs_on+0x98/0x150 [ 436.629196][T12728] do_syscall_64+0x55/0xb0 [ 436.633634][T12728] ? clear_bhb_loop+0x40/0x90 [ 436.638361][T12728] ? clear_bhb_loop+0x40/0x90 [ 436.643070][T12728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.648996][T12728] RIP: 0033:0x7f2fb079ce59 [ 436.653440][T12728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.673076][T12728] RSP: 002b:00007f2fb1645028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.681524][T12728] RAX: ffffffffffffffda RBX: 00007f2fb0a15fa0 RCX: 00007f2fb079ce59 [ 436.689521][T12728] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 436.697514][T12728] RBP: 00007f2fb0832d6f R08: 0000000000000000 R09: 0000000000000000 [ 436.705514][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.713515][T12728] R13: 00007f2fb0a16038 R14: 00007f2fb0a15fa0 R15: 00007fffa0a22618 [ 436.721552][T12728] [ 437.089339][T10174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.208525][T10174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.493324][T10174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.611675][T12748] __nla_validate_parse: 5 callbacks suppressed [ 437.611702][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2299'. [ 437.656032][T10174] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.720634][T12748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2299'. [ 437.843083][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2299'. [ 437.912978][T12759] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2301'. [ 438.033714][T12731] chnl_net:caif_netlink_parms(): no params data found [ 438.321318][ T5789] Bluetooth: hci4: command tx timeout [ 438.878925][T12786] validate_nla: 2 callbacks suppressed [ 438.878947][T12786] netlink: 'syz.0.2306': attribute type 29 has an invalid length. [ 438.901227][T12731] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.910893][T12731] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.918278][T12731] bridge_slave_0: entered allmulticast mode [ 438.964919][T12731] bridge_slave_0: entered promiscuous mode [ 439.005559][T12788] netlink: 'syz.2.2307': attribute type 1 has an invalid length. [ 439.023218][T12788] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2307'. [ 439.033871][T12731] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.034037][T12731] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.034350][T12731] bridge_slave_1: entered allmulticast mode [ 439.135698][T12731] bridge_slave_1: entered promiscuous mode [ 439.157027][T12786] netlink: 'syz.0.2306': attribute type 29 has an invalid length. [ 439.479466][T12731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.763301][T12731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.411977][ T5789] Bluetooth: hci4: command tx timeout [ 440.569299][T12731] team0: Port device team_slave_0 added [ 440.901231][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.909110][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.038104][T12731] team0: Port device team_slave_1 added [ 441.227218][T12818] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2313'. [ 441.624245][T12731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.641243][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.680526][T12731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.734269][T12731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.753954][T12731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.810317][T12731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.318529][T12731] hsr_slave_0: entered promiscuous mode [ 442.338997][T12731] hsr_slave_1: entered promiscuous mode [ 442.417822][T12731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.450233][T12731] Cannot create hsr debugfs directory [ 442.490583][ T5789] Bluetooth: hci4: command tx timeout [ 444.045234][T12875] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2328'. [ 444.176283][T10174] hsr_slave_0: left promiscuous mode [ 444.197235][T10174] hsr_slave_1: left promiscuous mode [ 444.300427][T10174] veth0_macvtap: left promiscuous mode [ 444.307918][T10174] veth1_vlan: left promiscuous mode [ 444.338789][T10174] veth0_vlan: left promiscuous mode [ 444.561348][ T5789] Bluetooth: hci4: command tx timeout [ 447.175110][T10174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.223707][T10174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.468529][T10174] bond0 (unregistering): Released all slaves [ 447.523751][T12875] netlink: 'syz.0.2328': attribute type 21 has an invalid length. [ 447.558528][T12881] syzkaller0: entered allmulticast mode [ 448.390201][T12917] netlink: 199832 bytes leftover after parsing attributes in process `syz.3.2337'. [ 448.741335][T12931] netlink: 'syz.2.2341': attribute type 29 has an invalid length. [ 448.770501][T12931] netlink: 'syz.2.2341': attribute type 3 has an invalid length. [ 448.787935][T12731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.794940][T12931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2341'. [ 448.811416][T12731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.030436][T12731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.054937][T12731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 449.277657][T12731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.335143][T12731] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.370006][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.377282][T10178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.502536][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.509996][T10178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.526124][T12956] netlink: 199832 bytes leftover after parsing attributes in process `syz.3.2348'. [ 450.317110][T12731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.587792][T12992] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2356'. [ 450.610714][T12731] veth0_vlan: entered promiscuous mode [ 451.059998][T12731] veth1_vlan: entered promiscuous mode [ 451.543828][T12731] veth0_macvtap: entered promiscuous mode [ 451.732046][T12731] veth1_macvtap: entered promiscuous mode [ 451.765322][T12731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.794146][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.839765][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.889378][T12731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 451.927266][T12731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.965828][T12731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.033437][T12731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.073578][T12731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.118076][T12731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.144904][T12731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.626218][T10190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.685531][T10190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.739235][T10190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.771665][T10190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.877367][T13045] netlink: 'syz.0.2363': attribute type 3 has an invalid length. [ 453.912308][T13045] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2363'. [ 454.210638][T13055] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2364'. [ 454.390707][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 456.234409][T13094] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2375'. [ 456.518318][T13101] IPv6: Can't replace route, no match found [ 456.587510][T13103] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2377'. [ 456.663593][T13103] net_ratelimit: 320 callbacks suppressed [ 456.663612][T13103] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 457.208149][T13111] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2379'. [ 457.650557][T13116] netlink: 124396 bytes leftover after parsing attributes in process `syz.2.2381'. [ 458.176500][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.187159][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.196003][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.216006][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.224038][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.235750][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.769284][T13124] chnl_net:caif_netlink_parms(): no params data found [ 458.988452][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.014663][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.035437][T13124] bridge_slave_0: entered allmulticast mode [ 459.051875][T13124] bridge_slave_0: entered promiscuous mode [ 459.080691][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.090417][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.097897][T13124] bridge_slave_1: entered allmulticast mode [ 459.131868][T13124] bridge_slave_1: entered promiscuous mode [ 459.184492][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.204004][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.258502][T13124] team0: Port device team_slave_0 added [ 459.269872][T13124] team0: Port device team_slave_1 added [ 459.318807][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.328270][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.370266][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.391944][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.399105][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.435635][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.663053][T13124] hsr_slave_0: entered promiscuous mode [ 459.679267][T13124] hsr_slave_1: entered promiscuous mode [ 459.881266][T13148] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2385'. [ 460.254270][T10172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.323033][ T5789] Bluetooth: hci0: command tx timeout [ 460.458365][T10172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.579046][T10172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.618461][T13158] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 460.649953][T13158] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2388'. [ 460.676799][T13160] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 460.687196][T13160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2388'. [ 460.752306][T10172] bond0: (slave netdevsim0): Releasing backup interface [ 460.767833][T10172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.962056][T13168] netlink: 'syz.1.2391': attribute type 3 has an invalid length. [ 460.983962][T13168] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2391'. [ 461.175545][T10172] tipc: Left network mode [ 461.760645][T13184] netlink: 'syz.0.2395': attribute type 2 has an invalid length. [ 461.770510][T13184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2395'. [ 461.804385][T13194] netlink: 'syz.1.2397': attribute type 10 has an invalid length. [ 461.832711][T13194] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2397'. [ 461.888419][T13194] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 462.138879][T13202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2397'. [ 462.400415][ T5789] Bluetooth: hci0: command tx timeout [ 462.715957][T13124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.948258][T13124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.999547][T13124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.090554][T13229] netlink: 'syz.1.2401': attribute type 10 has an invalid length. [ 463.115589][T13229] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2401'. [ 463.190594][T13229] hsr0: entered promiscuous mode [ 463.200897][T13229] bridge0: port 3(hsr0) entered blocking state [ 463.220095][T13229] bridge0: port 3(hsr0) entered disabled state [ 463.228896][T13229] hsr0: entered allmulticast mode [ 463.234507][T13229] hsr_slave_0: entered allmulticast mode [ 463.240663][T13229] hsr_slave_1: entered allmulticast mode [ 463.249259][T13229] bridge0: port 3(hsr0) entered blocking state [ 463.255685][T13229] bridge0: port 3(hsr0) entered forwarding state [ 463.299216][T13220] netlink: 'syz.1.2401': attribute type 10 has an invalid length. [ 463.324408][T13220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2401'. [ 463.347395][T13220] batadv0: entered promiscuous mode [ 463.377894][T13220] batadv0: entered allmulticast mode [ 463.399461][T13220] bridge0: port 4(batadv0) entered blocking state [ 463.414227][T13220] bridge0: port 4(batadv0) entered disabled state [ 463.432401][T13220] bridge0: port 4(batadv0) entered blocking state [ 463.439684][T13220] bridge0: port 4(batadv0) entered forwarding state [ 463.462389][T13124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.480503][T10189] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 463.490526][T10189] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 463.987950][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.021929][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.156738][T10189] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.163998][T10189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.235675][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.242924][T10174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.482755][ T5789] Bluetooth: hci0: command tx timeout [ 464.526039][T10172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.585864][T10172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.622897][T10172] batman_adv: batadv0: Interface deactivated: €Â0 [ 464.629619][T10172] batman_adv: batadv0: Removing interface: €Â0 [ 464.745848][T13266] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2413'. [ 464.849893][T10172] veth1_macvtap: left promiscuous mode [ 466.560478][ T5789] Bluetooth: hci0: command tx timeout [ 467.252999][T10172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.299991][T10172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.541457][T10172] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 467.612800][T10172] bond0 (unregistering): Released all slaves [ 467.675233][T13271] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 467.691675][T13271] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2414'. [ 467.711821][T13273] netlink: 'syz.0.2414': attribute type 10 has an invalid length. [ 467.743093][T13273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2414'. [ 467.761242][T13273] batadv0: entered promiscuous mode [ 467.790313][T13273] batadv0: entered allmulticast mode [ 467.795971][T13273] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 467.961773][T13280] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2416'. [ 467.994262][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.213705][T13124] veth0_vlan: entered promiscuous mode [ 468.316704][T13124] veth1_vlan: entered promiscuous mode [ 468.594042][T13124] veth0_macvtap: entered promiscuous mode [ 468.612498][T13124] veth1_macvtap: entered promiscuous mode [ 468.649572][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.692517][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.722278][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.762247][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.773310][T13292] syz.2.2421[13292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.773432][T13292] syz.2.2421[13292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.785375][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.785401][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.855869][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.882333][T13293] syz.2.2421[13293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.882459][T13293] syz.2.2421[13293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.889767][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.073736][T13295] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2422'. [ 469.113311][T13124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.135682][T13124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.155674][T13124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.164914][T13124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.944761][T10179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.000316][T10179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.037629][T10179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.047328][T10179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.190080][T13303] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2425'. [ 470.573980][T13318] netlink: 'syz.1.2430': attribute type 27 has an invalid length. [ 470.644715][T13318] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2430'. [ 471.278387][T13321] netlink: 'syz.1.2430': attribute type 21 has an invalid length. [ 471.378127][T13328] netlink: 'syz.0.2432': attribute type 30 has an invalid length. [ 472.011477][T13338] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2437'. [ 472.376356][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.386116][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.411387][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.458332][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.490386][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 472.498266][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.957053][T13344] chnl_net:caif_netlink_parms(): no params data found [ 473.199266][T10172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.268411][T13355] IPv6: Can't replace route, no match found [ 473.294904][T13365] netlink: 'syz.1.2445': attribute type 10 has an invalid length. [ 473.318104][T13365] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2445'. [ 473.366151][T10172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.421542][T13344] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.428952][T13344] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.436621][T13344] bridge_slave_0: entered allmulticast mode [ 473.443809][T13344] bridge_slave_0: entered promiscuous mode [ 473.453709][T13344] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.460970][T13344] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.468594][T13344] bridge_slave_1: entered allmulticast mode [ 473.476480][T13344] bridge_slave_1: entered promiscuous mode [ 473.617701][T10172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.720383][T13344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.803552][ T5786] Bluetooth: hci2: command tx timeout [ 474.853740][T10172] bond0: (slave netdevsim0): Releasing backup interface [ 474.887095][T10172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.920017][T13344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.077803][T13344] team0: Port device team_slave_0 added [ 475.084978][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2457'. [ 475.101768][T13344] team0: Port device team_slave_1 added [ 475.147195][T13344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.180237][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.265547][T13344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.316836][T13344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.324329][T13344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.351505][T13344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.761909][T13344] hsr_slave_0: entered promiscuous mode [ 475.776190][T13344] hsr_slave_1: entered promiscuous mode [ 475.783517][T13344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.804540][T13344] Cannot create hsr debugfs directory [ 475.957244][T10172] tipc: Left network mode [ 475.962024][T13414] IPv6: Can't replace route, no match found [ 476.896728][ T5786] Bluetooth: hci2: command tx timeout [ 478.076812][T13457] netlink: 'syz.1.2469': attribute type 6 has an invalid length. [ 478.111143][T13457] netlink: 'syz.1.2469': attribute type 3 has an invalid length. [ 478.118953][T13457] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.2469'. [ 478.688901][T13466] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2471'. [ 478.932992][T13344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.960589][ T5786] Bluetooth: hci2: command tx timeout [ 479.042662][T13344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.057639][T13478] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2473'. [ 479.085600][T13476] IPv6: Can't replace route, no match found [ 479.223133][T13344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 479.259820][T13480] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2474'. [ 479.285500][T13344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.798798][T13344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.863498][T13501] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2480'. [ 479.917940][T13501] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 479.934367][T13501] CPU: 1 PID: 13501 Comm: syz.0.2480 Not tainted syzkaller #0 [ 479.941899][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.951986][T13501] Call Trace: [ 479.955283][T13501] [ 479.958237][T13501] dump_stack_lvl+0x18c/0x250 [ 479.962959][T13501] ? show_regs_print_info+0x20/0x20 [ 479.968195][T13501] ? load_image+0x420/0x420 [ 479.972746][T13501] sysfs_warn_dup+0x8e/0xa0 [ 479.977289][T13501] sysfs_do_create_link_sd+0xc0/0x110 [ 479.982715][T13501] device_add_class_symlinks+0x1cf/0x240 [ 479.988401][T13501] device_add+0x507/0xc50 [ 479.992785][T13501] wiphy_register+0x1dad/0x2ae0 [ 479.997699][T13501] ? cfg80211_event_work+0x40/0x40 [ 480.002854][T13501] ? minstrel_ht_alloc+0x88a/0x990 [ 480.008011][T13501] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 480.014118][T13501] ieee80211_register_hw+0x3464/0x4250 [ 480.019646][T13501] ? ieee80211_tasklet_handler+0x20/0x20 [ 480.025320][T13501] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 480.031269][T13501] ? __debug_object_init+0xec/0x450 [ 480.036512][T13501] ? __asan_memset+0x22/0x40 [ 480.041146][T13501] ? __hrtimer_init+0x186/0x270 [ 480.046035][T13501] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 480.051819][T13501] ? mac80211_hwsim_free+0x220/0x220 [ 480.057139][T13501] ? rcu_is_watching+0x15/0xb0 [ 480.061963][T13501] ? kstrndup+0xbd/0x140 [ 480.066262][T13501] hwsim_new_radio_nl+0xdc9/0x1a90 [ 480.071414][T13501] ? __nla_validate+0x50/0x50 [ 480.076131][T13501] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 480.082505][T13501] ? __nla_parse+0x40/0x50 [ 480.086952][T13501] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 480.093325][T13501] genl_family_rcv_msg_doit+0x211/0x310 [ 480.098988][T13501] ? end_current_label_crit_section+0x170/0x170 [ 480.105279][T13501] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 480.111313][T13501] ? bpf_lsm_capable+0x9/0x10 [ 480.116034][T13501] ? security_capable+0x89/0xb0 [ 480.120929][T13501] genl_rcv_msg+0x619/0x7a0 [ 480.125470][T13501] ? genl_bind+0x360/0x360 [ 480.129917][T13501] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 480.136287][T13501] ? ref_tracker_free+0x690/0x840 [ 480.141355][T13501] netlink_rcv_skb+0x241/0x4d0 [ 480.146156][T13501] ? genl_bind+0x360/0x360 [ 480.150605][T13501] ? netlink_ack+0x1180/0x1180 [ 480.155437][T13501] ? __lock_acquire+0x7d40/0x7d40 [ 480.160511][T13501] ? down_read+0x1ac/0x2e0 [ 480.164954][T13501] genl_rcv+0x28/0x40 [ 480.168964][T13501] netlink_unicast+0x751/0x8d0 [ 480.174547][T13501] netlink_sendmsg+0x8d0/0xbf0 [ 480.179359][T13501] ? netlink_getsockopt+0x590/0x590 [ 480.184589][T13501] ? aa_sock_msg_perm+0x94/0x150 [ 480.189571][T13501] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 480.194890][T13501] ? security_socket_sendmsg+0x80/0xa0 [ 480.200386][T13501] ? netlink_getsockopt+0x590/0x590 [ 480.205623][T13501] ____sys_sendmsg+0x5ba/0x960 [ 480.211219][T13501] ? __asan_memset+0x22/0x40 [ 480.215938][T13501] ? __sys_sendmsg_sock+0x30/0x30 [ 480.221092][T13501] ? __import_iovec+0x5f2/0x850 [ 480.225982][T13501] ? import_iovec+0x73/0xa0 [ 480.230518][T13501] ___sys_sendmsg+0x2a6/0x360 [ 480.235228][T13501] ? __sys_sendmsg+0x2a0/0x2a0 [ 480.240079][T13501] __se_sys_sendmsg+0x1c2/0x2b0 [ 480.246791][T13501] ? __x64_sys_sendmsg+0x80/0x80 [ 480.251791][T13501] ? lockdep_hardirqs_on+0x98/0x150 [ 480.257033][T13501] do_syscall_64+0x55/0xb0 [ 480.261480][T13501] ? clear_bhb_loop+0x40/0x90 [ 480.266183][T13501] ? clear_bhb_loop+0x40/0x90 [ 480.270897][T13501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.276834][T13501] RIP: 0033:0x7f2fb079ce59 [ 480.281281][T13501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.301009][T13501] RSP: 002b:00007f2fb1645028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.309461][T13501] RAX: ffffffffffffffda RBX: 00007f2fb0a15fa0 RCX: 00007f2fb079ce59 [ 480.317824][T13501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 480.325907][T13501] RBP: 00007f2fb0832d6f R08: 0000000000000000 R09: 0000000000000000 [ 480.334008][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.342008][T13501] R13: 00007f2fb0a16038 R14: 00007f2fb0a15fa0 R15: 00007fffa0a22618 [ 480.350029][T13501] [ 480.465915][T13344] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.517672][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.524923][T10178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.602762][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.609966][T10178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.781908][T13516] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2482'. [ 480.834502][T13522] netlink: 'syz.3.2484': attribute type 21 has an invalid length. [ 480.891582][T13522] IPv6: NLM_F_CREATE should be specified when creating new route [ 481.052890][ T5786] Bluetooth: hci2: command tx timeout [ 481.754269][T10172] veth0_macvtap: left promiscuous mode [ 481.760033][T10172] veth1_vlan: left allmulticast mode [ 481.799048][T10172] veth0_vlan: left promiscuous mode [ 482.550325][T10172] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 482.773258][T10172] team0 (unregistering): Port device hsr_slave_0 removed [ 482.905860][T10172] team0 (unregistering): Port device team_slave_1 removed [ 482.993156][T10172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.048092][T10172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.371684][T10172] bond0 (unregistering): Released all slaves [ 483.413408][T13545] netlink: 'syz.1.2489': attribute type 17 has an invalid length. [ 483.430911][T13545] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 483.819403][T13563] netlink: 'syz.1.2491': attribute type 9 has an invalid length. [ 483.846740][T13563] netlink: 201636 bytes leftover after parsing attributes in process `syz.1.2491'. [ 484.298819][T13571] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2493'. [ 484.344757][T13344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.561411][T13344] veth0_vlan: entered promiscuous mode [ 484.627554][T13344] veth1_vlan: entered promiscuous mode [ 484.655602][T13587] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2497'. [ 484.797371][T13344] veth0_macvtap: entered promiscuous mode [ 484.833097][T13344] veth1_macvtap: entered promiscuous mode [ 484.874313][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.908043][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.927715][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.944666][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.956779][T13344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.000099][T13593] netlink: 'syz.1.2498': attribute type 2 has an invalid length. [ 485.020708][T13594] netlink: 'syz.1.2498': attribute type 21 has an invalid length. [ 485.044890][T13594] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2498'. [ 485.102341][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.147660][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.190193][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.231207][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.288551][T13344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.316740][T13344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.348180][T13344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.445025][T13344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.480247][T13344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.489182][T13344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.500324][T13344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.624457][T10190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.639549][T10190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.687011][T10190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.702910][T10190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.750042][T13612] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2504'. [ 487.176497][T13626] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2510'. [ 487.195373][T13626] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 487.254017][T13623] syzkaller0: entered promiscuous mode [ 487.259861][T13623] syzkaller0: entered allmulticast mode [ 487.268456][T13617] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2434'. [ 488.102771][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.165450][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.177072][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.250702][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.309870][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 488.317779][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.700888][T13634] IPv6: Can't replace route, no match found [ 488.726135][T13641] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2514'. [ 488.787158][T10172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.038425][T10172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.052610][T13643] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2515'. [ 489.348619][T10172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.026341][T13662] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2521'. [ 490.032249][T10172] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.316473][T13635] chnl_net:caif_netlink_parms(): no params data found [ 490.400646][ T5786] Bluetooth: hci1: command tx timeout [ 490.587289][T10172] tipc: Left network mode [ 490.618183][T13635] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.646148][T13635] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.660492][T13635] bridge_slave_0: entered allmulticast mode [ 490.669061][T13635] bridge_slave_0: entered promiscuous mode [ 490.990947][T13635] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.030539][T13635] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.041404][T13635] bridge_slave_1: entered allmulticast mode [ 491.070477][T13635] bridge_slave_1: entered promiscuous mode [ 491.249421][T13685] IPv6: Can't replace route, no match found [ 491.484946][T13635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.496038][T13695] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2526'. [ 491.497745][T13635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.758282][T13635] team0: Port device team_slave_0 added [ 491.770004][T13697] netlink: 'syz.2.2527': attribute type 9 has an invalid length. [ 491.791215][T13635] team0: Port device team_slave_1 added [ 491.827144][T13697] netlink: 201636 bytes leftover after parsing attributes in process `syz.2.2527'. [ 491.875914][T13635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.919001][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.959426][T13635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.126473][T13635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.134423][T13635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.166078][T13635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.455266][T13710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.480410][ T5786] Bluetooth: hci1: command tx timeout [ 492.488848][T13710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.579686][T13710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.591358][T13710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.059834][T13635] hsr_slave_0: entered promiscuous mode [ 493.070774][T13635] hsr_slave_1: entered promiscuous mode [ 493.076923][T13635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.085399][T13635] Cannot create hsr debugfs directory [ 493.558583][T13734] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2535'. [ 493.898256][T13733] IPv6: Can't replace route, no match found [ 494.401893][T13759] netlink: 'syz.3.2540': attribute type 9 has an invalid length. [ 494.410300][T13759] netlink: 201636 bytes leftover after parsing attributes in process `syz.3.2540'. [ 494.564295][ T5786] Bluetooth: hci1: command tx timeout [ 494.942701][T10172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.958292][T10172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.978295][T10172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.987530][T10172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.055085][T10172] veth1_macvtap: left promiscuous mode [ 495.070787][T10172] veth0_macvtap: left promiscuous mode [ 496.644384][ T5786] Bluetooth: hci1: command tx timeout [ 497.092976][T10172] geneve1 (unregistering): left promiscuous mode [ 497.103614][T10172] team0 (unregistering): Port device geneve1 removed [ 497.387455][T10172] team_slave_1 (unregistering): left promiscuous mode [ 497.396671][T10172] team0 (unregistering): Port device team_slave_1 removed [ 497.437725][T10172] C (unregistering): left promiscuous mode [ 497.445927][T10172] team0 (unregistering): Port device C removed [ 497.889458][T13773] syzkaller0: entered promiscuous mode [ 497.897449][T13773] syzkaller0: entered allmulticast mode [ 497.905318][T13769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.916220][T13769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.934049][T13769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.958892][T13769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.997447][T13769] bridge0: port 4(batadv0) entered disabled state [ 498.043084][T13769] bridge0: port 4(batadv0) entered disabled state [ 498.339293][T13782] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2546'. [ 498.488460][T13635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.548674][T13635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.576056][T13787] netlink: 'syz.1.2548': attribute type 1 has an invalid length. [ 498.612350][T13635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.638845][T13787] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2548'. [ 498.688997][T13635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.908344][T13635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.945721][T13635] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.017966][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.025212][T10172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.085521][T10177] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.092816][T10177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.597514][T13819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.604835][T13819] IPv6: NLM_F_CREATE should be set when creating new route [ 499.612206][T13819] IPv6: NLM_F_CREATE should be set when creating new route [ 499.619452][T13819] IPv6: NLM_F_CREATE should be set when creating new route [ 499.647926][T13823] bridge_slave_1: left allmulticast mode [ 499.691094][T13823] bridge_slave_1: left promiscuous mode [ 499.716607][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.735444][T13823] bridge_slave_0: left allmulticast mode [ 499.741722][T13823] bridge_slave_0: left promiscuous mode [ 499.748038][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.865300][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 499.919186][T13635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.062220][T13635] veth0_vlan: entered promiscuous mode [ 500.098031][T13834] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.2564'. [ 500.111095][T13635] veth1_vlan: entered promiscuous mode [ 500.275624][T13836] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2557'. [ 500.390173][T13635] veth0_macvtap: entered promiscuous mode [ 500.429061][T13635] veth1_macvtap: entered promiscuous mode [ 500.683352][T13844] syzkaller0: entered promiscuous mode [ 500.688900][T13844] syzkaller0: entered allmulticast mode [ 500.778515][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.791635][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.832631][T13635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.864320][T13635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.893152][T13635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.911865][T13635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.941578][T13635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.970268][T13635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.979021][T13635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.002582][T13635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.291350][T10177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.302753][T10177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.358929][T10174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.390369][T10174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.902401][ T5786] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 501.927257][T13888] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2567'. [ 501.973895][T13894] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2570'. [ 502.207225][T13898] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2570'. [ 502.258502][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.267962][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.703531][T13907] netlink: 162416 bytes leftover after parsing attributes in process `syz.2.2573'. [ 502.733309][T13907] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 503.148083][T13915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.335070][T13928] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2580'. [ 503.920830][ T5789] Bluetooth: hci1: command tx timeout [ 503.981848][T13942] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 503.989960][T13942] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2584'. [ 504.029606][T13948] netlink: 'syz.0.2586': attribute type 39 has an invalid length. [ 504.233473][T13948] hsr_slave_1 (unregistering): left promiscuous mode [ 504.781447][T13968] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2590'. [ 505.166375][T13963] veth0_vlan: entered allmulticast mode [ 506.257281][T13997] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2598'. [ 506.290750][T13997] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 506.802483][T14008] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2601'. [ 507.607585][T14026] netlink: 'syz.1.2609': attribute type 9 has an invalid length. [ 507.623401][T14023] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2606'. [ 507.634656][T14026] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2609'. [ 507.657680][T14026] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 507.708697][T14026] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 508.180333][T14039] netlink: 'syz.0.2612': attribute type 2 has an invalid length. [ 508.190650][T14039] netlink: 'syz.0.2612': attribute type 8 has an invalid length. [ 508.219387][T14039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2612'. [ 508.532553][T14047] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2613'. [ 508.796527][T14054] netlink: 'syz.1.2616': attribute type 11 has an invalid length. [ 508.815049][T14054] netlink: 'syz.1.2616': attribute type 2 has an invalid length. [ 508.833354][T14054] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.2616'. [ 509.150933][T14050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.188407][T14082] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2624'. [ 511.206489][T14097] netlink: 'syz.1.2628': attribute type 29 has an invalid length. [ 511.242083][T14097] netlink: 'syz.1.2628': attribute type 29 has an invalid length. [ 512.455547][T14097] netlink: 'syz.1.2628': attribute type 29 has an invalid length. [ 512.468323][T14094] IPv6: Can't replace route, no match found [ 512.503121][T14110] netlink: 'syz.2.2631': attribute type 9 has an invalid length. [ 512.520286][T14110] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2631'. [ 512.525060][T14108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.730397][T14112] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2632'. [ 512.996400][T14117] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2633'. [ 513.232297][T14127] netlink: 'syz.0.2637': attribute type 29 has an invalid length. [ 513.336863][T14127] netlink: 'syz.0.2637': attribute type 29 has an invalid length. [ 513.376026][T14129] netlink: 'syz.0.2637': attribute type 29 has an invalid length. [ 513.417883][T14132] netlink: 'syz.0.2637': attribute type 29 has an invalid length. [ 513.459787][T14127] netlink: 'syz.0.2637': attribute type 29 has an invalid length. [ 513.916776][T14127] netlink: 'syz.0.2637': attribute type 29 has an invalid length. [ 515.190520][T14151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.528951][T14160] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2645'. [ 515.955940][T14163] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2646'. [ 516.037340][T14158] IPv6: Can't replace route, no match found [ 516.935507][T14171] IPv6: Can't replace route, no match found [ 517.077641][T14189] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2656'. [ 517.423549][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.474811][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.513221][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.581385][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.641737][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.691893][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.785463][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.865318][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 517.997405][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 518.069829][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 518.576601][T14197] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2659'. [ 518.992297][T14227] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2667'. [ 519.516622][T14225] IPv6: Can't replace route, no match found [ 519.790555][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2671'. [ 521.527845][T14270] netlink: 'syz.3.2680': attribute type 29 has an invalid length. [ 521.574411][T14270] netlink: 'syz.3.2680': attribute type 29 has an invalid length. [ 521.679890][T14272] netlink: 'syz.3.2680': attribute type 29 has an invalid length. [ 521.696775][T14274] veth1_virt_wifi: entered allmulticast mode [ 521.729678][T14270] netlink: 'syz.3.2680': attribute type 29 has an invalid length. [ 521.984949][T14280] netlink: 'syz.3.2682': attribute type 29 has an invalid length. [ 522.020521][T14280] netlink: 'syz.3.2682': attribute type 29 has an invalid length. [ 522.054965][T14284] netlink: 'syz.3.2682': attribute type 29 has an invalid length. [ 522.188726][T14290] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 522.949687][T14278] IPv6: Can't replace route, no match found [ 523.136361][T14307] __nla_validate_parse: 4 callbacks suppressed [ 523.136380][T14307] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2689'. [ 523.318215][T14311] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2693'. [ 523.903788][T14334] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2698'. [ 523.971858][T14336] netlink: 'syz.0.2697': attribute type 4 has an invalid length. [ 524.033035][T14336] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2697'. [ 525.087736][T14346] netlink: 'syz.1.2701': attribute type 41 has an invalid length. [ 525.445803][T14350] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2702'. [ 525.893940][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 526.011853][T14364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2707'. [ 526.521250][T14379] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2712'. [ 527.149583][T14371] netlink: 'syz.0.2710': attribute type 10 has an invalid length. [ 527.202317][T14371] team0: Device hsr_slave_0 failed to register rx_handler [ 527.440078][T14386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2714'. [ 527.546034][T14386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2714'. [ 528.268108][T14424] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2724'. [ 528.353171][T14427] netlink: 'syz.0.2725': attribute type 3 has an invalid length. [ 528.361180][T14427] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2725'. [ 528.512950][T14432] netlink: 'syz.1.2727': attribute type 10 has an invalid length. [ 528.577645][T14432] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.683581][T14432] bridge_slave_1: left allmulticast mode [ 528.710484][T14432] bridge_slave_1: left promiscuous mode [ 528.736049][T14432] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.839697][T14432] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 528.881441][T14441] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2729'. [ 528.913264][T14441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.028986][T14441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2729'. [ 530.902135][T14488] IPv6: Can't replace route, no match found [ 530.971710][T14486] IPv6: Can't replace route, no match found [ 531.023532][T14495] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2743'. [ 531.110525][T14494] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2742'. [ 531.273862][T14498] netlink: 'syz.2.2744': attribute type 10 has an invalid length. [ 533.130165][T14539] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2754'. [ 533.310436][T14542] IPv6: Can't replace route, no match found [ 533.419933][T14544] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2755'. [ 533.650642][T14544] netlink: 'syz.0.2755': attribute type 10 has an invalid length. [ 533.715105][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2755'. [ 533.861511][T14544] batman_adv: batadv0: Adding interface: veth0_vlan [ 533.884802][T14544] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.943175][T14544] batman_adv: batadv0: Interface activated: veth0_vlan [ 534.947033][T14558] ================================================================== [ 534.955152][T14558] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 534.963073][T14558] Write of size 56 at addr ffff888063d8e010 by task syz.2.2760/14558 [ 534.971218][T14558] [ 534.973540][T14558] CPU: 0 PID: 14558 Comm: syz.2.2760 Not tainted syzkaller #0 [ 534.980987][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.991202][T14558] Call Trace: [ 534.994477][T14558] [ 534.997488][T14558] dump_stack_lvl+0x18c/0x250 [ 535.002288][T14558] ? __lock_acquire+0x7d40/0x7d40 [ 535.007488][T14558] ? show_regs_print_info+0x20/0x20 [ 535.012694][T14558] ? load_image+0x420/0x420 [ 535.017191][T14558] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 535.022649][T14558] ? __virt_addr_valid+0x18c/0x540 [ 535.027756][T14558] ? __virt_addr_valid+0x469/0x540 [ 535.032861][T14558] print_report+0xa8/0x210 [ 535.037300][T14558] ? __bpf_get_stackid+0x6bf/0x900 [ 535.042428][T14558] kasan_report+0x117/0x150 [ 535.046942][T14558] ? __bpf_get_stackid+0x6bf/0x900 [ 535.052054][T14558] kasan_check_range+0x241/0x290 [ 535.056990][T14558] ? __bpf_get_stackid+0x6bf/0x900 [ 535.062098][T14558] __asan_memcpy+0x40/0x70 [ 535.066511][T14558] __bpf_get_stackid+0x6bf/0x900 [ 535.071447][T14558] bpf_get_stackid_pe+0x343/0x410 [ 535.076472][T14558] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 535.081925][T14558] bpf_overflow_handler+0x1fc/0x510 [ 535.087124][T14558] ? bpf_overflow_handler+0xde/0x510 [ 535.092410][T14558] ? tp_perf_event_destroy+0x20/0x20 [ 535.097695][T14558] ? perf_trace_preemptirq_template+0x144/0x330 [ 535.103950][T14558] ? __perf_event_account_interrupt+0x187/0x280 [ 535.110191][T14558] __perf_event_overflow+0x447/0x630 [ 535.115475][T14558] perf_swevent_event+0x319/0x570 [ 535.120491][T14558] ? perf_tp_event+0x1520/0x1520 [ 535.125430][T14558] ___perf_sw_event+0x4a7/0x730 [ 535.130273][T14558] ? ___perf_sw_event+0x199/0x730 [ 535.135295][T14558] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 535.141707][T14558] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 535.147709][T14558] ? rep_movs_alternative+0x30/0x90 [ 535.153060][T14558] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.159220][T14558] ? lockdep_hardirqs_on+0x98/0x150 [ 535.164442][T14558] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.170596][T14558] __perf_sw_event+0x139/0x270 [ 535.175362][T14558] do_user_addr_fault+0x123e/0x12c0 [ 535.180566][T14558] ? rcu_is_watching+0x15/0xb0 [ 535.185419][T14558] exc_page_fault+0x64/0x100 [ 535.190013][T14558] asm_exc_page_fault+0x26/0x30 [ 535.194862][T14558] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 535.200663][T14558] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 535.220356][T14558] RSP: 0018:ffffc90013dbfb30 EFLAGS: 00050206 [ 535.226422][T14558] RAX: ffffffff842a7f01 RBX: 0000000000000038 RCX: 0000000000000038 [ 535.234387][T14558] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90013dbfbc0 [ 535.242358][T14558] RBP: ffffc90013dbfdd0 R08: ffffc90013dbfbf7 R09: 1ffff920027b7f7e [ 535.250332][T14558] R10: dffffc0000000000 R11: fffff520027b7f7f R12: 0000000000000038 [ 535.258310][T14558] R13: 1ffff920027b7f74 R14: ffffc90013dbfbc0 R15: 0000000000000000 [ 535.266286][T14558] ? _copy_from_user+0x41/0xe0 [ 535.271067][T14558] _copy_from_user+0x8b/0xe0 [ 535.275651][T14558] ___sys_sendmsg+0x1c7/0x360 [ 535.280328][T14558] ? __sys_sendmsg+0x2a0/0x2a0 [ 535.285152][T14558] __se_sys_sendmsg+0x1c2/0x2b0 [ 535.290003][T14558] ? __x64_sys_sendmsg+0x80/0x80 [ 535.294942][T14558] ? syscall_enter_from_user_mode+0x2e/0x80 [ 535.300837][T14558] do_syscall_64+0x55/0xb0 [ 535.305332][T14558] ? clear_bhb_loop+0x40/0x90 [ 535.309999][T14558] ? clear_bhb_loop+0x40/0x90 [ 535.314667][T14558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.320558][T14558] RIP: 0033:0x7f419d99ce59 [ 535.324966][T14558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.344669][T14558] RSP: 002b:00007f419e826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.353086][T14558] RAX: ffffffffffffffda RBX: 00007f419dc15fa0 RCX: 00007f419d99ce59 [ 535.361052][T14558] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 535.369015][T14558] RBP: 00007f419da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 535.376988][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.384952][T14558] R13: 00007f419dc16038 R14: 00007f419dc15fa0 R15: 00007ffe219a42d8 [ 535.392931][T14558] [ 535.395942][T14558] [ 535.398250][T14558] Allocated by task 14558: [ 535.402652][T14558] kasan_set_track+0x4e/0x70 [ 535.407270][T14558] __kasan_kmalloc+0x8f/0xa0 [ 535.411849][T14558] __kmalloc_node+0xb4/0x230 [ 535.416473][T14558] bpf_map_area_alloc+0x5e/0x110 [ 535.421427][T14558] prealloc_elems_and_freelist+0x86/0x1c0 [ 535.427157][T14558] stack_map_alloc+0x33a/0x4c0 [ 535.431922][T14558] map_create+0x877/0x12f0 [ 535.436347][T14558] __sys_bpf+0x651/0x890 [ 535.440601][T14558] __x64_sys_bpf+0x7c/0x90 [ 535.445010][T14558] do_syscall_64+0x55/0xb0 [ 535.449421][T14558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.455318][T14558] [ 535.457631][T14558] The buggy address belongs to the object at ffff888063d8e000 [ 535.457631][T14558] which belongs to the cache kmalloc-cg-64 of size 64 [ 535.471768][T14558] The buggy address is located 16 bytes inside of [ 535.471768][T14558] allocated 40-byte region [ffff888063d8e000, ffff888063d8e028) [ 535.485741][T14558] [ 535.488055][T14558] The buggy address belongs to the physical page: [ 535.494466][T14558] page:ffffea00018f6380 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888063d8eb00 pfn:0x63d8e [ 535.505914][T14558] memcg:ffff88807635c001 [ 535.510145][T14558] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 535.518035][T14558] page_type: 0xffffffff() [ 535.522355][T14558] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c2d540 0000000000000003 [ 535.530932][T14558] raw: ffff888063d8eb00 000000008020001c 00000001ffffffff ffff88807635c001 [ 535.539504][T14558] page dumped because: kasan: bad access detected [ 535.546085][T14558] page_owner tracks the page as allocated [ 535.551800][T14558] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 13635, tgid 13635 (syz-executor), ts 512654848095, free_ts 512654415904 [ 535.570384][T14558] post_alloc_hook+0x1c1/0x200 [ 535.575158][T14558] get_page_from_freelist+0x1951/0x19e0 [ 535.580698][T14558] __alloc_pages+0x1f0/0x460 [ 535.585279][T14558] alloc_slab_page+0x5d/0x160 [ 535.589945][T14558] new_slab+0x87/0x2d0 [ 535.594007][T14558] ___slab_alloc+0xc5d/0x12f0 [ 535.598678][T14558] __kmem_cache_alloc_node+0x19e/0x250 [ 535.604133][T14558] kmalloc_trace+0x2a/0xe0 [ 535.608544][T14558] alloc_fdtable+0xca/0x2c0 [ 535.613042][T14558] dup_fd+0x786/0xa50 [ 535.617015][T14558] copy_files+0xc3/0x120 [ 535.621270][T14558] copy_process+0x15ab/0x3dc0 [ 535.625972][T14558] kernel_clone+0x24b/0x8a0 [ 535.630482][T14558] __x64_sys_clone+0x1b7/0x230 [ 535.635329][T14558] do_syscall_64+0x55/0xb0 [ 535.639737][T14558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.645627][T14558] page last free stack trace: [ 535.650287][T14558] free_unref_page_prepare+0x7b2/0x8c0 [ 535.655747][T14558] free_unref_page+0x32/0x2e0 [ 535.660424][T14558] vfree+0x1a6/0x320 [ 535.664319][T14558] __do_replace+0x858/0x990 [ 535.669134][T14558] do_ip6t_set_ctl+0xb48/0xe10 [ 535.674003][T14558] nf_setsockopt+0x263/0x280 [ 535.678667][T14558] do_sock_setsockopt+0x175/0x1a0 [ 535.683693][T14558] __x64_sys_setsockopt+0x182/0x200 [ 535.688893][T14558] do_syscall_64+0x55/0xb0 [ 535.693309][T14558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.699206][T14558] [ 535.701521][T14558] Memory state around the buggy address: [ 535.707137][T14558] ffff888063d8df00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 535.715192][T14558] ffff888063d8df80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 535.723248][T14558] >ffff888063d8e000: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 535.731296][T14558] ^ [ 535.736659][T14558] ffff888063d8e080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 535.744727][T14558] ffff888063d8e100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 535.752875][T14558] ================================================================== [ 535.760951][T14558] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 535.768136][T14558] CPU: 0 PID: 14558 Comm: syz.2.2760 Not tainted syzkaller #0 [ 535.775586][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 535.785640][T14558] Call Trace: [ 535.789087][T14558] [ 535.792015][T14558] dump_stack_lvl+0x18c/0x250 [ 535.796697][T14558] ? show_regs_print_info+0x20/0x20 [ 535.801890][T14558] ? load_image+0x420/0x420 [ 535.806584][T14558] panic+0x2dc/0x730 [ 535.810493][T14558] ? __lock_acquire+0x7d40/0x7d40 [ 535.815517][T14558] ? bpf_jit_dump+0xd0/0xd0 [ 535.820016][T14558] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 535.825905][T14558] ? _raw_spin_unlock+0x40/0x40 [ 535.830755][T14558] ? __bpf_get_stackid+0x6bf/0x900 [ 535.835866][T14558] check_panic_on_warn+0x84/0xa0 [ 535.840806][T14558] ? __bpf_get_stackid+0x6bf/0x900 [ 535.846092][T14558] end_report+0x6f/0x130 [ 535.850337][T14558] kasan_report+0x128/0x150 [ 535.854837][T14558] ? __bpf_get_stackid+0x6bf/0x900 [ 535.859952][T14558] kasan_check_range+0x241/0x290 [ 535.864891][T14558] ? __bpf_get_stackid+0x6bf/0x900 [ 535.870001][T14558] __asan_memcpy+0x40/0x70 [ 535.874419][T14558] __bpf_get_stackid+0x6bf/0x900 [ 535.879527][T14558] bpf_get_stackid_pe+0x343/0x410 [ 535.884551][T14558] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 535.890001][T14558] bpf_overflow_handler+0x1fc/0x510 [ 535.895232][T14558] ? bpf_overflow_handler+0xde/0x510 [ 535.900527][T14558] ? tp_perf_event_destroy+0x20/0x20 [ 535.905847][T14558] ? perf_trace_preemptirq_template+0x144/0x330 [ 535.912102][T14558] ? __perf_event_account_interrupt+0x187/0x280 [ 535.918429][T14558] __perf_event_overflow+0x447/0x630 [ 535.923712][T14558] perf_swevent_event+0x319/0x570 [ 535.929039][T14558] ? perf_tp_event+0x1520/0x1520 [ 535.934286][T14558] ___perf_sw_event+0x4a7/0x730 [ 535.939200][T14558] ? ___perf_sw_event+0x199/0x730 [ 535.944228][T14558] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 535.950726][T14558] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 535.956612][T14558] ? rep_movs_alternative+0x30/0x90 [ 535.961847][T14558] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.968005][T14558] ? lockdep_hardirqs_on+0x98/0x150 [ 535.973202][T14558] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.979362][T14558] __perf_sw_event+0x139/0x270 [ 535.984127][T14558] do_user_addr_fault+0x123e/0x12c0 [ 535.989326][T14558] ? rcu_is_watching+0x15/0xb0 [ 535.994086][T14558] exc_page_fault+0x64/0x100 [ 535.998696][T14558] asm_exc_page_fault+0x26/0x30 [ 536.003559][T14558] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 536.009371][T14558] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 536.028988][T14558] RSP: 0018:ffffc90013dbfb30 EFLAGS: 00050206 [ 536.035057][T14558] RAX: ffffffff842a7f01 RBX: 0000000000000038 RCX: 0000000000000038 [ 536.043021][T14558] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90013dbfbc0 [ 536.050994][T14558] RBP: ffffc90013dbfdd0 R08: ffffc90013dbfbf7 R09: 1ffff920027b7f7e [ 536.058965][T14558] R10: dffffc0000000000 R11: fffff520027b7f7f R12: 0000000000000038 [ 536.066965][T14558] R13: 1ffff920027b7f74 R14: ffffc90013dbfbc0 R15: 0000000000000000 [ 536.075030][T14558] ? _copy_from_user+0x41/0xe0 [ 536.079803][T14558] _copy_from_user+0x8b/0xe0 [ 536.084389][T14558] ___sys_sendmsg+0x1c7/0x360 [ 536.089329][T14558] ? __sys_sendmsg+0x2a0/0x2a0 [ 536.094103][T14558] __se_sys_sendmsg+0x1c2/0x2b0 [ 536.098949][T14558] ? __x64_sys_sendmsg+0x80/0x80 [ 536.103890][T14558] ? syscall_enter_from_user_mode+0x2e/0x80 [ 536.109780][T14558] do_syscall_64+0x55/0xb0 [ 536.114188][T14558] ? clear_bhb_loop+0x40/0x90 [ 536.118859][T14558] ? clear_bhb_loop+0x40/0x90 [ 536.123537][T14558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.130471][T14558] RIP: 0033:0x7f419d99ce59 [ 536.134904][T14558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.154515][T14558] RSP: 002b:00007f419e826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.162933][T14558] RAX: ffffffffffffffda RBX: 00007f419dc15fa0 RCX: 00007f419d99ce59 [ 536.170902][T14558] RDX: 0000000002000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 536.178960][T14558] RBP: 00007f419da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 536.187734][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.195708][T14558] R13: 00007f419dc16038 R14: 00007f419dc15fa0 R15: 00007ffe219a42d8 [ 536.203694][T14558] [ 536.206988][T14558] Kernel Offset: disabled [ 536.211324][T14558] Rebooting in 86400 seconds..