last executing test programs: 3.866562083s ago: executing program 3 (id=3156): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfcbf, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x10, 0x1}, 0x23) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x81, 0x30, 0x0, 0x4, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext, 0x10644, 0x2, 0x7, 0x1, 0x0, 0x75, 0x7f, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, r5, 0xa) setsockopt$sock_attach_bpf(r6, 0x29, 0x1d, 0x0, 0x3d) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)=""/158, 0x9e}], 0x1}, 0x20) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a0a1ff0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0xd}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.5936393s ago: executing program 3 (id=3159): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x73) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107383, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7af, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000028000b6394f90509a16dd8e50000cc57", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x0, @perf_config_ext={0x9, 0x5c}, 0x320c, 0x0, 0x0, 0x0, 0x2, 0x4, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRESOCT=r3], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x4) 3.034671164s ago: executing program 3 (id=3162): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) (async) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) (async, rerun: 32) write$cgroup_type(r0, &(0x7f0000000000), 0x9) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@fallback=r0, 0x22, 0x1, 0x3, &(0x7f0000000d80)=[0x0], 0x1, 0x0, &(0x7f0000000dc0)=[0x0], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup(r0, &(0x7f0000000f00)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ec0)={@cgroup=r2, r0, 0x18, 0x2011, r0, @value=r0, @void, @void, @void, r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000060700000001441cca116401010200"], 0x40}, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2, 0x3, 0x84) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000440)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000600), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x11, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x5, 0x2, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000000340)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41000, 0x0, '\x00', r8, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xfac1, 0x6, 0x10001, 0x1, r7, 0x40, '\x00', r8, r6, 0x1, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000a00)=[{}, {}], 0x10, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) openat$cgroup_procs(r5, &(0x7f0000000d40)='tasks\x00', 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="e37d3775a1d511ef78a43dadad14187d4794fc333756baf80b875f429d9a45951448fbe2c2fcd098a817686390c6a46b95b14eb72ad03c18362086d944ee8249f667457f242f3fafbc988b6a25fe7dd14e8be3fc064e9af367165cf6773fa74720cfb69a4243d428de16781dc9c26b06356cbc5720cc9a60bd970e29da07a7aa48fe5ffe07d6a27b7a44c22c35226af1be8053d4e0fbc51d2147a92f0228d88ed718b14ae4bc69254adfee2c31ff21c29067137e8eccb9cdf7e247050709949baaa117bdae29c81300c4885c7716076c91caa63c9bb916a880bce7d1d3df43a392372eb87bb1adf395119f293fe926b9659657", 0xf3}, {&(0x7f0000000680)="ce4813ba29690a2baec080b7fa49e9f6d864bf12c20a640592ca8e2240dc70bdb0426b747ff4fa62c340dd3ae6412aca08f596712f21882c7cd609936a56ecf101f73e23ca1779fb14824437bc7567c8c63509ea9a7d8f21d910d95cf160687bce1c68904b46faa522a8f1db89586d7cf75f5809ec23b11269e9456363d6723b88562638fb073d43d4e90252f726", 0x8e}, {&(0x7f0000000740)="86971ead6ce3f59d5783ee67bf902002204a10de6354c7acbfc677902c99900193f6534b8dcdccd28ba4b09b58bc1e733630792c7af71358ab89c8cd41eebe9f356c7ed3d48b6be36290a74cae14045487669c2f2a3cd9d35c61444696f6c64031bc73c078f2f110d4a53300481f74d7fe7e6815875509e1a5ab73e4c476db45f4d6f3", 0x83}, {&(0x7f0000000800)="735934fa3e6d57d021ee85df9c295fef2eeb4e2f6e739f7d5400b951fcdb860d52d2c5b75f8a9dfea8bd6bba911c79da92250b4516355bd9fc82e2ef1205a66e7135a6635086b09e0864c6a1445b9b24be15bd8e11d293357a6a47c0a63ef95b12226a3dee0fc1ae277502e6b84c8abef7a77e32414626d243d4306d8f9b8bcee1af699b510a22f75c0dbaa61df7f25a653e94bfc96d8befd0d0bfb8d57a0461d299fa4ba973967a348469a95249c2cc7414f35b5b4bde9c9147514da896f63c63198d17461fee0e891f5dcc7ba8aedb32152c61efa65385b780ce", 0xdb}], 0x4, &(0x7f0000000c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast}}}], 0xb8}, 0x4) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') (async) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x16, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x44) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 2.935318796s ago: executing program 1 (id=3164): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000000000000010000146cf44300", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000fe0100000001"], 0x38}, 0x8841) 2.886881447s ago: executing program 3 (id=3165): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES8=0x0, @ANYRESDEC=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r4, 0x0, 0xa0028000}, 0x38) 2.885262248s ago: executing program 2 (id=3167): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1, 0x0, 0x21}, 0x0) 2.701526482s ago: executing program 2 (id=3169): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9fffffffffffeff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2.602507225s ago: executing program 3 (id=3170): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10040) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) gettid() r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$sock(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)="f4", 0x1}], 0x1}, 0x8001) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600607fa400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9858af17ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 2.596840675s ago: executing program 1 (id=3171): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x50}, [@ldst={0x2, 0x0, 0xb, 0x0, 0x0, 0xe00}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector=0x8000000}, 0x48) 2.596671265s ago: executing program 2 (id=3172): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="d80000003200b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a000140f9bf7948f940ea0313070dcc5cdc1f19580077f49081eb06000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edd57cc3e8", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b870000000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)}, 0x12000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4}, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="0004000000000000000000002000080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8feded79070011"], 0xfdef) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000013"], 0xfe33) 2.522109107s ago: executing program 1 (id=3173): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfff0, 0x500}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.434653609s ago: executing program 1 (id=3175): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x123001, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) ioctl$TUNGETFEATURES(r0, 0x5452, &(0x7f0000001740)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f91124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xc}], 0x10}, 0xfc00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f000000028000a1121f", 0x2e}], 0x1}, 0x0) 2.40718969s ago: executing program 2 (id=3176): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000015006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd70000000000000000000000000008", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) 2.358618231s ago: executing program 0 (id=3177): socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000040)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)}], 0x4, &(0x7f0000000340)=""/12, 0xc}, 0x40002200) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000013c0)=@generic={&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x8, 0x0, r2, 0xffff07f6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50) r4 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000001700)={&(0x7f0000001480)=@nl=@proc, 0x80, &(0x7f0000001680)=[{&(0x7f0000001500)=""/152, 0x98}, {&(0x7f00000015c0)=""/161, 0xa1}], 0x2, &(0x7f00000016c0)=""/35, 0x23}, 0x62) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002a00)={&(0x7f00000027c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfa, 0xfa, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x4}, @union={0x8, 0x8, 0x0, 0x5, 0x1, 0xcae4, [{0x10, 0x3, 0xee}, {0x4, 0x5, 0xffffffff}, {0x5, 0x2, 0x1}, {0xc, 0x2, 0x9}, {0xe, 0x5, 0x9a}, {0x8, 0x2, 0x100}, {0xf, 0x3, 0xffffffff}, {0x1, 0x5, 0x2}]}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0xd}, {0x10}, {0x3, 0xffffeb60}, {0x8, 0xbd53}, {0xd, 0x2}]}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x7f, 0x1}, {0x3, 0x3, 0x800}], "86fa"}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}]}, {0x0, [0x5f, 0x61, 0x61]}}, &(0x7f0000002900)=""/230, 0x119, 0xe6, 0x1, 0xfffffff8, 0x10000}, 0x28) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a80)={0xffffffffffffffff, 0xffff, 0x10}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x4, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x11, 0x1, &(0x7f0000001740)=@raw=[@alu={0x4, 0x0, 0x683c8fdc5e608e4c, 0x6, 0x0, 0x6, 0xfffffffffffffff0}], &(0x7f0000001780)='GPL\x00', 0x2, 0x1000, &(0x7f00000017c0)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002a40)={0x5, 0x3, 0x7ff, 0xef2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002b40)=[r3, r6, r2, r7], &(0x7f0000002b80)=[{0x5, 0x3, 0xb, 0xe}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x7fffffff}, 0x94) r9 = perf_event_open$cgroup(&(0x7f0000002cc0)={0x4, 0x80, 0xb, 0x0, 0x2, 0x0, 0x0, 0x5f1f, 0x45100, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000002c80), 0x2}, 0x114000, 0x4a4, 0x0, 0x7, 0x5, 0x87a, 0x1ff, 0x0, 0x2, 0x0, 0xc}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000002d40)='GPL\x00') write$cgroup_devices(0xffffffffffffffff, &(0x7f0000002d80)={'c', ' *:* ', 'm\x00'}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003080)={r8, 0xe0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000002e00)=[0x0, 0x0], &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000002e80)=[{}], 0x8, 0x10, &(0x7f0000002ec0), &(0x7f0000002f00), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000002f40)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r10, &(0x7f0000003300)={&(0x7f0000003100)=@x25, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003180)="66b4dea7cc40f0fe1c3ac70bc3de7db7591dc64a01", 0x15}], 0x1, &(0x7f0000003200)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xc}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xd8}, 0x5) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f0000003340)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000003380), 0x80, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f00000033c0)) sendmsg$inet(r1, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003400)="af4be43a3bc42b35d6c79f2ea6223832c00cd74064a092fa8a94fbab34cd09d2eeeb797c6509b3fb968e910b03811ce85dbed33ef3643501cc77a1e676f92afee88890b915f000fd7164f7c97b6078541c2cc1cf208cd3b67cb9ec7ec01e96b03fc5166f92e5dc9df39d070b9b10c2665658ec3cc14aa9693a234c31ed53bdc636c5b53e88b23b5ada370750c99dfff789", 0x91}, {&(0x7f00000034c0)="13e3d2ae9ee6eebe54a057d3646a8d083650bbcc8ecf4315626300cb5b81ab95810a70dd661ca550efd1a21157786894bba5cc83c7142c75907c7f696f4331f1ebba4c8d3db9b680b9b80a0ece2c884ad12cff548e05606a021702392244fffad8362b8e1db9717faec607187d93af93e2179a03fb53e84ab30b712fec5b2d3162de16b7ab3a547622cda74ba457122206058a18db", 0x95}, {&(0x7f0000003580)="0101ebe2fec638207acb4d52336c330693170530b6d43353c20261061ce9cbf867d7d7bd0a689371c4c6c603dfbd8541182bed4e4dc1cb055f5f650818603385513e19d398811a64f7be3e78a6", 0x4d}, {&(0x7f0000003600)="5fcc918602fc21429e9d2ba93af38f472fda06642ffdbe6005af1c163a9489d403814cfffe9474a6c7ace922", 0x2c}, {&(0x7f0000003640)="61859642fa6bf74d9e10faab634555a864741162c197919b12ab11fd24967c825a2e979de2015594a25bc768aa017f6d493bda7d332f92418fa1ce3d4a63c57ca4f21fbdb19dbd6acf001b1b43c4609d2711ec82fcdbf07dfb2f936783b4df3cd6881dd2c74652787ea966e11fdbbd7040fd7c2e4adfb61b70dc8dbed55013db688ccecdb3a3f65747e2af1cdade64b6175dcf82b5454895e3d5a3c9f278df4f962f1c42d55079668d95918f7b2b61b4c88341698608eea3ce36f0fc9dca7eec2c63515dae5b24022fa6f259f09c130b67525b1008be12fd806daab9d5063759caae7bb5ee45d63b14a7d49ef821db", 0xef}, {&(0x7f0000003740)="5ad9eeecc0b6d45005ac8e7a315e04357cd5682bc06395329a6366db4353b07f1b4681c08167df84ec979f014c6143753678b91a84cd5c5c547a3748e3ad70aeec", 0x41}, {&(0x7f00000037c0)="b6931d54962142e208cf37e73ad207a172275572737cdb305284d1454af2211c2ac5a020bce8a9120775ff8b12b7dd7e8685fe06a071ce9f592f2ca82a2e293faee6342375e9a934083201bc7de59d8e11a8062a291bfb8e0693952097dc9bdf2c402974e103aae03fceb92e6009a4fa44426d190131e6abea5ffd5c3634c069ff0c48a530948bcf13ac67d4f47155e2352005ad4ca8a7d71ff50ef90b9d02066d470934310a35", 0xa7}], 0x7, &(0x7f0000003900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x25}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x21}}], 0x48}, 0x48080) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000039c0)={r10}) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000003a00)={r12}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003cc0)={r13, 0x0, 0x6b, 0xe6, &(0x7f0000003a40)="ddd3b8333ad09b1519ee025c96d3b020b3096788445d186ac9d69acb202dffba6ce911eed44f6f1a98311003c5084a21b45ec3460d307ed35041fb8c20ea28a1516edb39b0152fcfa04ad568747ec00bab86b4dd497a594afb41458f25c80b7d66e0a5b15de49578407201", &(0x7f0000003ac0)=""/230, 0x13c, 0x0, 0x7e, 0x6e, &(0x7f0000003bc0)="b5ae865070483f53a9e3023f510cfda6fd936b21f8bbb38881dcc7be40f85db529b9510be999680abfdcebf3835863db091b15ae76cc90cf6d092489fce42906be8fa684061c96b65784469e1fd2f94e676b96b3d40b382cd7c88ed127462d256db54d893e8fd2771bfffea0adf1005b540858976c754793283cc4f50250", &(0x7f0000003c40)="4098801f9005dd6c3724a33d4d873a679f79ff278e357012508d9b6591ffab4b8965c2721603d03224ae0905df804a4ec3326a227a61fee22089a7eed33c76f5858a3b0debf792624b211ab5e712f1a5d81dcf02f3f8d839a9ae415188562413bd5144a4d044dcf0d0a7ff65a51f", 0x5, 0x0, 0x8}, 0x50) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000003d40), 0x80200, 0x0) ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000003d80)) sendmsg(r11, &(0x7f0000006440)={&(0x7f0000003dc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003e40)="3de5f3fcf072abee23325319c8fd8a4bf59c8155f2fffbb4143e8bf4004626e26591d8958d365a9ec0823b31f1dfe0593d0e6fa52478a70f0645d9a6b43475dce730b87b7aee66771b53610d6347bb844f08fabd7f03d57ea8054b2802aca0361cafc65c57c39fe42be08a81dfa7beca138e0ce0c5dee811287057eaf4210de8de045d2a9aa8717d833f66e417d4dd169cafeb1cfeabbd168479a66ed0cc906ce37fdd67", 0xa4}, {&(0x7f0000003f00)="705425f4c5834e4478150517cf6ff586e71e5b38f33c6a8de0c8adfdf6034c874ad87b9a46f3", 0x26}, {&(0x7f0000003f40)="2079d8107a3a112d4b835825cae91c49d7decf9c03ffd8399a2d28baaad5fe876234bce9687accb8318507698f48c8e97dca2566080dd2769033c0412114a95ca2b8f7d47aa621323e947a936d72e18d8b46a87efbef9267d50cf93f7c8223eda1a689364ab7efabaaa91ba33bb0bccc4cc166d3802d94bcbd7c126a76213d9966e414e282387d0cfb226ff8c3bbcb01236fdaf40ce76f6b327d108354d9752f0843f6f381c479ed6d6a705df8faa7", 0xaf}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="5f963c313c329798c85b16002367fd943a8a6e1cf36abde53da28c27aae12f4f9c9d15fa7abde7caacdf63ff57f90cfe8bd1c097af093e08eea03b3040e08d7159951f9123d63df8c242a17af2ae7d44c68ddb4600ac9a74d25a58a91cd8061cff052f47d1e0d20a1759aba88db50286fc4037071e8452feea4716fe2e216e48c88ced20db508eb958a7be1b20e174399ac9fdf21f7fd96650dd8c27f2e761625c7b06343b3fe6a9a503f16c0ae4d6a21b691fac0fab56ca3cd61fc210c68c911b4e8d58ee9e704015883cdd05365185689c5ace1bc9bf34bcb729ffc2221ff209793f27c85cdc8ad92795", 0xeb}, {&(0x7f0000005100)="bd739e066b9da69100ac5ba326c3c74d0fe3ca3afc9189b801f380fb2ba8f406bd4a4ecee5ec0b404d0322cb8bf3165a7fba5bf7e9bf5dcdc6617b2e1b5f7d327f365fd648da0be0ed9f9d567b4dbb49214e45ea409f8590a86561bbc8772e357eca163890ffa3ffbb9bd84125fb5dd04dbb5b03222473088fc71ec5741cac0a37a64947d7032bf280ddce5f9016b3c40ecf7995d1898ecbd94e10f5b15f4c4a720aa36f28dbaa60d50bd08b19bccd32a36e6ee9ce148e270f", 0xb9}], 0x6, &(0x7f0000005240)=[{0xa8, 0x110, 0x5, "db2ce34e07c381d09fcc4f99346ebbd4f94853d37ba20d1f8e50b9de3c43c3f424067fdbf6e00d66626d68509c1854f33b928f4dc4c140138ef624ca23214c6a06758705b54174bc1104ce5471eb253d4419704c70ee37bfa6eafad42cec5fc635209d1e044e0b971be8006af81579ca41d01ccd8825b22b3bf7324e373f8bf1a3dc4d3ceaf4d2ea8cce368dec2c2ee8d1a685"}, {0x110, 0x102, 0xa0a6, "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"}, {0x1010, 0x115, 0x10000, "27818b3c890028ee67cb0b8617f8ca6ead473f750d803db94e82e358a4e315c07f2f897ce3569169fb850a6a517c12b9aa8d3a4d32aeb25a83377f1931320e0884e1d9b3103c323582b7c25427bea4d20430c2a44b6d8331da736d63ddb706d26d1e6ea3d850efbaa789945addc8601606720c9131f58b055a39c91fd39571cbe2abf505a6329a5633ccf2ed85b4073cf193050dff1abf90629c70c960eb4515ece8ae999a81ce19e5e2099ae3ba84329fb4bd30b58c3b26f08a774d4bf081da597965927d3c6e5f4f30b03f973e11b859e5ae6a54e4815894b4a68e7e36bd0a815a451f28244eca9ac5c5b26b71250d5c14e16dc8d5841b68d83c0997739eb3c0ba950eeeea1ec4ce4621c597ea1e8c5d8748c05c271e2c3d7262266e1762c28426118146294dc5de01ad1e50d6314c000a212c5930927c5dcd7097388709fee6d8750bf3b71aedb668d9ba96d71f930236b2d8e77ea7d39814c7fdd3479d05256ffdf5dfe2f179201cbdd0bd413f4c9c8d34fdd4c61c5a6695a89136369ba47647c3cda5ee224837b920d9df962f12060f2b88d27bf98aa159be32c74180a7fff2dfb7f558b20d0367a9db13d755425f1bb86fc23664e39194b49a54b0791f3c06f431deec88e4d85c98fdee9d3d5b46d053bedec37a89f2f06cf23d31c07ce2bc84f31d14bb040c91e2ed652538d6a48dceb7342104791b82f8c0a1c5f36b36b29d8a5ae7038dc21657ddf23e5e5c4459ef7ea9d29641547f8ea6f813ff4146a2d4ad66bedbc46d69823093db80691469bca5824b02d3770376fa793a12f9c3665e6facc058f6fc556114e17a5c9e57b0acefdc4798294fd515c905f64847158e723cd8106c0e9fa39adff59eb64a4c65e50a751d9c3ffb037562b4d302be7b26091853662f18df70fffa0d49ef4631b194f57b5748a680b7d2520bee9fb3f3dfc23cc404b17c4164aee5f16b1485d8c2962a2578898c8070cb869319aac360cebe90bfb2f10b6d25ef9163b4c77f92489825266af1e21da17b6c925f6920063cd5faf0781aae55e4def2a7456db10fe7ca830ddca51da07d5a43d8ab3b24bf53276939033bea5b241ddb7b26f8921ff3e35217950df3173963a2ce7419b8d5aaeb6cbb1732e57205bf26e50acc5926f50c2891e7166f7913f7016650e602c35a88e4cad1159c983cb6e26c9e476f0da4d4274531dcc0cf395ef8887f2d1d58ecbe9bd9fa0b6770709badb32482a5ce5d4fcf63f73da98102ca09f658603b715ee62b34c3e37b41a822c539e52002c99d536349e6e28de64f0838821748d51ea6bc88ad9545fe0f5a71692a2b81a2eaa6b7aabb6cd749910961822d8e7139f4d6b8760c16f2aaa83e4189c8d266465095cb9356dc0c58a016b625c8ff583dc755163d1449b2299b3d7b5b02c1726f3032c5a875ea03bc081416a53327ed6da3ef9fc0dbc0eaa88549586e1b2eee9b4077c3e9a09de7cc7e10bf718bf44634991325c13e9f79e650af3651400ccf5f882969c93036a024d6def7fd57a586ae15abe82a3d4cec22005c015d269f268a8f9212bc06cf4b301f91fc58a75f0a7e21aa2f2e0e48be9ed627175137e7db7276476b686d6f3c60e7fe1794c0b365c947a30bb68d3fbbaa1304325de476c175a42d04697636965a7eb7a39bff4bdfe469270dff23a1dddfe24764e9b2dfb59f85cb9699cf45bf95d42424775f727396305de290bb277b77ed2ce85720e4d8be9edae02d93a955eeae1da0f55cca90e26d5aad1ff985f4ebc9a010c46eb8458aee5b4b91955cef32e06e908749a275664ef36e8aac26674420b6fa071148adc5303a19c439654d6b1850cfeb88c6f24e69ff07829b92a954f26da222265374d87d31394c2c30819687cc1cc8b1a92dd69c5e235a424ae4f608b4d09f42c5579696e02ef607e26a8ca05b9fda0961c4e5deb6fb4bc041b9a7553c6d787f9ff2297205fd46c31c3cd6d739cae5c5509fb11c62b4267f9f55ae65a624fc9e8c0d8cbe54cc9c9ea4af35be0b0599adca7985cf2d11ce3a8cd32f97359a0f3a47bbec893d4e5231ff61ad184140ed68e0fc0e8b44666f94daac30066fd2d89be21742f4802d4687f8d1fc79b835dfaf8020491d850515f076249797d0e3d9db7ccd5a7fc0bdf606dc13db3bd1d993dbb78e6331abe4f927db5bff8d52d7bab2ca44600c069e29f68470f84e823828968382a29be9b026da2b0ff6a95ada97beee0d43e434925d5fa7ea4a6aa9936b217f903b2e936f4d96de591dd403271e8a24185d09610699444506ed0a1f5904c73033fa8536a009b6f18af0d6f9c9bb09f7fc055da1a09ce9a70d38b814aef96cc5d48b3d97c63be53d038c860e8b0af295b028da862be45c20c42b8d5da37ca2253b2237a77e09e98ac7af91bf682b39d4550817e2e9189d85bdf2c0938d416e44c5dd97b86b5d9bef9d38d42f9277d444527355f6add4dfd03a932e1d04928c00ab5fe6ff36bb8642a3e501ac15195670f6c47721ef7c4c87d1a34f3a6ce325ba6037818cbfe197e3bbf522a0ba8b729156142ec744b33ee7703023b1c9372c266175bdef96595172fb5e2437d9590c6f41217c7c1643cf301abe144a4f36624fd07a9d91548ce35493b3eb7b6d022367097f977a2404aa86113a8c658a70c1008a675078ebb3bfab8a27a405276b4c74f564349ffad96f045ca241a6e55281fb46650464243b2e93fb00a55b37d44ce19e51bd77e4f26c67d48b59a2d63db41f6b4c87fee06e2f4116cce05dfce641f9bcd102669d85eb5416670b3199728dfdba33bf132da959572d122f2d0c0ce1606e37e295fe2f7ad7c675729e1557c773f56ed50a1d2c73347fa03a531aa21f998d6ab3b29cd45f357861f00645c3e4cff6c6f189f029091fb668d8e94aa62ae0a7e975d0dff1e0f991d336628d236b6e9fe1589536d98deb1776a0f5896419446856f5ea361d52236f7516591689d92cb95ea6829207baf4c8b18ff7242bb230a9503a5b885a68f72fce84c40e49b9b2ca3a2b7b734cdf06859e8c641f3d3b0560976defa2e2382fa4d9a9dc2dbdeecf17914de5c5d5047ffa05fd1b3ea3408e3e2b9a97c283e319de66a939c65953dd1ccde42cc57ad1c685a88e80c16161cd7d75ae8d9725b4362e21eb3a62c31674f44207a37054777644ed60d5eca3698a0217d55fb01751678fe527dd2778d2b5ecabcfa9d1e46c7d644c83fda908ec779ccff400ef794d38600cfeded0bdc85abcc51132bc855e26e4092159327e973ad80ea8dba18dafc61277fc662bb8eaf0bd3fa1e12d7ae07e326502c8da6167bee1f5d8056915aac87f4694a4881565c5a34f552ca6bc60f60870212b736cfad0f1308095fede8f8c9817ecfbda49e513672bddfa3c203e23ec516f3f5080da0fc6f901702eb2335036a850559b4c639c7a1d870448f455338dc81082363a2c30f0930e642995061f3d0e504c51a0f21109dcbcef23a6d776ccc9e1163beac05d5cb44709316f00e300110d18f08261ec34cded9a4156d13e5ed22612a5ae380cd829e1027cdf58d319859346276e9eb0f0077cf99bdeaa4c6735405eb1735a7106a922b39c3d4b4008bdee5a3b5d2758c423cdd56f1fbb6304416afac511b7842cbe2baeb8a8d9758ef03abbcbbf7c526d9721d685fae5dcd841a508720c1958279fd4a010a851a7f3a404181fa1d55c2cb6fff632dd4a2969ba9aae47a8aff32f5702f10005f1d858f97766ef583cf096e3b970bf07fe45f4710036a204298cfcddfbbceb1d19cff622b4fc62bbef7af11f8e3849bc9e4ac6d69edabab491ccf37008bd219b17c4a9a422270b0f67e68f9715a06ce48aced0cc05747704d19c624338454a8c9d0645518df05ff59c8b97882fbb55107585828c752d552b87c183a2bc8f7d7986751807af53d0947d4f9e250ea7d8815e52d916a0d2e968fddddb8b9f3e7c7ff789b2106e07b70550773eebd5e72d6d03d1e9973db0bb9d2aa4cd72b165fa2355e985f07bccbedb85abc734619b022f1e1e63efc6265e354a7f6943f7d1edd66274c2ff1ecc8145c20504f648a5857d25b5f376a2ad200c19712c21b7ef707f15ab3667986a6b0f036bb84189be775f2bd6e17952a9e5879214fe3ebf5afe6fcd10bcf1d72cef8cf4e7cc9ebe2836cc9b4c35f9eb8e5eca7ad06fca25f74df3851d905a7a27f01f79351b499cae7a81912035cad0969405e058160f2d147ffb7022e6bdc7dfbd5d1839c73f3d756588af8958b491dd703a04638499f85e6d8960ac2ed2e1107ab9c801df0aa60583d2ad143e288ae58efdc46ee2ac89383cdfa09b602963f273dc7a06ba987ac3e553f6c4529427a9f17862ad2b86f406572d5003e3f7af2e321d895f72bb0df2bbcb62b3bcab03207bf6e85ed5a937de7a5b0338a3f735ed95fde53a87e53c93b09823c9a9025ed03fdbb6c8ae27aae4e3d1be2e73e2d0dd0b4764de94f9f7260e2be31aeca0625d7b2294302ae3f0426751d5bac71b351d6862d900ac20144455e34ca65262f94a3808e51c86a03fced088738ef039110b303326a7876fc057d4981deed82a09c2cf9f12a98c1d3b9db36b5aea1aac31bfeed0f6763cd080ec1b7d416593e7f469e4e7ea1516c2fb29927f58a5ac0cb1f49960b4f68213d1421a0bd42783cdac9bc50c85bc71e8c8c8a19b9756b8605096f5f5e35305f84df61cc6ae7168669ddbf74478dc4af2dec44f82593b16e085869f8e03fa355a424a17cdb3d28f5825055ab9df0c012f4a8a6c42407abb6cffd3b4f9458683e450105fd9addc4e44c91f5693dac1c52624b812a821d6da180916d68f52f5b4840fd752e6a2a8c5b1928c7b35ec3251465ff14a6315680a676d203901ce5b658c7ef371866f38a98d429452b3e14343a4f2021bb7580ea6712e7a8ffa0eea13cf46c44cf63e660492e7311749a452c83e5e30d7ea435355719575d1d30acaeb16dcb2fcdf423b636c55174680e4f4b5fb2a7e5ce98efe566a13e3f6d9ceb6b4d4eb32f52dcb8d9f979b0fbe133023c0a70a1e359f296582fef49cbb3f41a1050e96424a32bccc2088f6e49cd54df963320cccf18ce9942e2f465b380f7d3f1b8867434dfe0cb2f0a7bef6c0a3f188932eb8b0d4787ae1a57169a0be23bbbf17a835ce5c19567fa345528dd1796728330d1c8def00740e06b1373cfbd099945940ea090c086c736b01c2fb8e393c7e7ca88b6705a3ea859f75dfc4a904955fed5e381bbdac17d1140d88e816215fa3049c6af94e75be1330de7bd89138ed68297f37a29a3e80011005426d5646c3bc11bdb429950a25b149d570f2797c28394cbf656d5cbb042ff4b8cf1098660334aedb584304d29a09579989be7920809014ca3f8062a890e16050b54cecdcf55556f3a3bcbb68bcbcc7b0a2cb42e4bbb89381ffdfb6538e028f8bc0c43bcee9cdbf40ab4aaea41cd6795247e4b4924c89c9e31f284a32f27c7c22992a422225940217b1f9c3a6a4b8bea19b5856749a749b6470d3bba89ffdaf510d2fac43df2da7df70d66af4700edff3db4782b4cc6d20800338549e71dc74a38c2f8074ace4873805398c66448354f0876189923372d8bef3a334b9767adec57a3a7e8911968e37e8a55dfe26d33e13e13de15ca8e28755accad2fb510c58f9fdd16b6cfab38f4e374a4abc145b191a1b18fda93c77412194070f38b2eb62db61eb2866ae797fabb1afd071230e9761d8081167c268c12ccecac9730b43969a2ddc715b63c33406cc5a37bab636528eca4546fac609259d"}], 0x11c8}, 0x800) sendmsg$sock(r10, &(0x7f00000066c0)={&(0x7f0000006480)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0x80, &(0x7f0000006600)=[{&(0x7f0000006500)="85f4", 0x2}, {&(0x7f0000006540)="d93048e78f06900410d8d969ed4aa6278f", 0x11}, {&(0x7f0000006580)="5ab1596c86985a1ba683a673e50d22fba4eec86eede5e43b3e21ba0926c09097d6d7771dd0ae309f2d4df5c53d32a00cbafec53efeb4c76cef7c52389818352a12e648047b1ac6a0916ec71bae9a1beb", 0x50}], 0x3, &(0x7f0000006640)=[@txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xffff7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x60}, 0x800) socket$kcm(0x29, 0x5, 0x0) getpid() ioctl$TUNGETFILTER(r14, 0x801054db, &(0x7f0000006700)=""/110) 2.298500232s ago: executing program 0 (id=3178): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13c"], &(0x7f0000000140)='GPL\x00'}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/77, 0x4d}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/205, 0xcd}], 0x4, &(0x7f0000001780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x20001) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x100000, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="100000000000000003ee3af14a6e916aa23849512eda0100000000000081be882a9fbc104c"], 0x10}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000001000000400000002000000000000000", @ANYRES32, @ANYBLOB="001200fde7146a00000000000000000018000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.142894586s ago: executing program 2 (id=3179): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f28a1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 390.61878ms ago: executing program 3 (id=3180): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x35, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@call={0x85, 0x0, 0x0, 0xae}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x32}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}, @ldst={0x2, 0x1, 0x6, 0x9, 0x8, 0x2, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0x4, 0x12, &(0x7f00000005c0)=""/18, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x4, 0x7, 0x800}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x1], &(0x7f00000006c0)=[{0x3, 0x4, 0x7, 0x8}, {0x0, 0x1, 0x8}, {0x3, 0x2, 0x8, 0xc}, {0x1, 0x4, 0xd, 0x8}, {0x3, 0x3, 0x6, 0x9}, {0x5, 0x2, 0xc, 0x9}, {0x2, 0x2, 0xa, 0x1}], 0x10, 0x5}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000008c0)=r1) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff61}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x22, 0x2, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x1000, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x0, 0x3, 0x0, 0x40080000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r1) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000008000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffff0f0000000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 348.591102ms ago: executing program 0 (id=3181): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 328.243172ms ago: executing program 1 (id=3182): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000283400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) 218.864535ms ago: executing program 0 (id=3183): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x10, 0xfd, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x9, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="6364e8fde9f9e2cd500d54e6728f152d5199e1b1bf3dbe5a80ed8c7f468cbc0beea4b7a544893ae8e1495f65717d5fbeaefecedffccc1ec7f7d17963878fb912a594d4098c9cf2c5275eaebfc91b734cc62d1204e7880a8171ecf219a86a8e48ebf9a9ebd86c0d4d630fbcb4361b7892e0eaf6fcefa630277f45201841867afe472da93a05001c99400fb9209b100037987de4b4001f1f66d4a133f37d595b2a60e61cc2e80fd4e2e7cfd57c019ef90aa32e5b072ce9a475f0b2f7d2ee12cebbb042268a6c745d7df594c98df07365aa3388f3b0639624449f6d", @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@map=r5, r3, 0x2f, 0x10, 0x4, @void, @value=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 199.158615ms ago: executing program 1 (id=3184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xffffffff}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="85b88b0af92086ddacc098794160127e09d53f6bc784ffd70c34021ebcf97ed969d49f0ec9f7b1609b31df89750e0ce6f55ffe3d96aefff6a36796a9b0ade268d0559736c59138d6eea25556cee3afc814d97bf1bb5bac510bb4cdd56c03b4380a43a544fec6", @ANYRES64=0x0], 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) 137.369817ms ago: executing program 2 (id=3185): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000004000000080000000000000001000000000000000000001100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) 42.013929ms ago: executing program 0 (id=3186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2c, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x4, r0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x12, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='syzkaller\x00', 0x7f, 0x22, &(0x7f00000002c0)=""/34, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x4, 0x1f, 0x10001}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[r2, r2], &(0x7f00000003c0)=[{0x4, 0x3}, {0x2, 0x1, 0x7, 0x4}], 0x10, 0x7}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000180)='./file0\x00', r3}, 0x18) setsockopt$sock_attach_bpf(r1, 0x11b, 0x3, &(0x7f0000000040)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 0s ago: executing program 0 (id=3187): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000fe5e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 05] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 282.707616][ T9905] __kmalloc+0xa7/0x240 [ 282.711790][ T9905] bpf_prog_test_run_skb+0x242/0x18f0 [ 282.717164][ T9905] ? __fget_files+0x28/0x460 [ 282.721749][ T9905] ? __fget_files+0x3fc/0x460 [ 282.726433][ T9905] ? cpu_online+0x60/0x60 [ 282.730768][ T9905] bpf_prog_test_run+0x31f/0x390 [ 282.735816][ T9905] __sys_bpf+0x49d/0x890 [ 282.740074][ T9905] ? bpf_link_show_fdinfo+0x390/0x390 [ 282.745465][ T9905] ? lock_chain_count+0x20/0x20 [ 282.750312][ T9905] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 282.756640][ T9905] __x64_sys_bpf+0x7c/0x90 [ 282.761073][ T9905] do_syscall_64+0x55/0xb0 [ 282.765488][ T9905] ? clear_bhb_loop+0x40/0x90 [ 282.770160][ T9905] ? clear_bhb_loop+0x40/0x90 [ 282.774841][ T9905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.780728][ T9905] RIP: 0033:0x7f56ce39e0d9 [ 282.785176][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.804996][ T9905] RSP: 002b:00007f56cf1dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.813505][ T9905] RAX: ffffffffffffffda RBX: 00007f56ce625fa0 RCX: 00007f56ce39e0d9 [ 282.821475][ T9905] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 282.829529][ T9905] RBP: 00007f56cf1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 282.837545][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.845631][ T9905] R13: 00007f56ce626038 R14: 00007f56ce625fa0 R15: 00007fff4aca3138 [ 282.853615][ T9905] [ 283.994525][ T9934] validate_nla: 1 callbacks suppressed [ 283.994563][ T9934] netlink: 'syz.0.1499': attribute type 21 has an invalid length. [ 284.179926][ T9934] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 284.618733][ T9956] syzkaller0: entered promiscuous mode [ 284.626964][ T9956] syzkaller0: entered allmulticast mode [ 284.637724][ T9954] netlink: 'syz.3.1510': attribute type 25 has an invalid length. [ 284.659833][ T9954] netlink: 'syz.3.1510': attribute type 9 has an invalid length. [ 284.669999][ T9954] __nla_validate_parse: 3 callbacks suppressed [ 284.670035][ T9954] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1510'. [ 284.690217][ T9962] netlink: 'syz.1.1512': attribute type 21 has an invalid length. [ 284.707199][ T9962] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1512'. [ 286.341461][ T9985] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1520'. [ 286.924826][ T9958] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1511'. [ 287.571697][T10012] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1528'. [ 287.917344][T10021] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1531'. [ 288.102887][T10030] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1536'. [ 288.122892][T10030] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.1536'. [ 288.426788][T10044] netlink: 'syz.1.1541': attribute type 21 has an invalid length. [ 288.434874][T10044] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 288.444350][T10044] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1541'. [ 288.955705][T10060] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 289.227731][T10065] netlink: 'syz.0.1550': attribute type 21 has an invalid length. [ 289.242089][T10065] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1550'. [ 289.369775][T10068] sit0: entered allmulticast mode [ 289.494333][T10068] sit0: entered promiscuous mode [ 289.818680][T10083] syzkaller0: entered promiscuous mode [ 289.836124][T10083] syzkaller0: entered allmulticast mode [ 292.501144][T10110] __nla_validate_parse: 2 callbacks suppressed [ 292.501164][T10110] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.1568'. [ 292.527274][T10110] netlink: 'syz.3.1568': attribute type 10 has an invalid length. [ 292.538125][T10110] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1568'. [ 292.937750][T10128] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1573'. [ 292.996430][T10128] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 293.336360][T10146] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1579'. [ 293.893011][T10154] netlink: 'syz.3.1582': attribute type 21 has an invalid length. [ 293.908712][T10154] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1582'. [ 294.073449][T10154] sit0: left promiscuous mode [ 294.608115][T10158] sit0: entered promiscuous mode [ 294.862577][T10167] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1587'. [ 295.031624][T10167] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1587'. [ 295.064880][T10168] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 295.074518][T10168] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 295.737380][T10170] delete_channel: no stack [ 296.280902][T10203] netlink: 'syz.3.1600': attribute type 5 has an invalid length. [ 296.382338][T10204] netlink: 'syz.2.1599': attribute type 21 has an invalid length. [ 296.406173][T10204] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1599'. [ 296.561731][T10204] sit0: entered allmulticast mode [ 296.679389][T10205] sit0: entered promiscuous mode [ 296.845233][T10211] netlink: 'syz.3.1601': attribute type 15 has an invalid length. [ 296.883137][T10211] netlink: 'syz.3.1601': attribute type 7 has an invalid length. [ 296.959984][T10215] netlink: 'syz.0.1603': attribute type 10 has an invalid length. [ 297.484801][T10224] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1610'. [ 297.515233][T10224] netlink: 'syz.0.1610': attribute type 10 has an invalid length. [ 297.529915][T10224] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1610'. [ 297.693853][T10224] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 297.839142][T10224] batman_adv: batadv0: Removing interface: virt_wifi0 [ 297.858227][T10238] FAULT_INJECTION: forcing a failure. [ 297.858227][T10238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.882985][T10238] CPU: 1 PID: 10238 Comm: syz.1.1614 Not tainted syzkaller #0 [ 297.890534][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.900678][T10238] Call Trace: [ 297.904317][T10238] [ 297.907252][T10238] dump_stack_lvl+0x18c/0x250 [ 297.911941][T10238] ? show_regs_print_info+0x20/0x20 [ 297.917140][T10238] ? load_image+0x420/0x420 [ 297.921742][T10238] ? __lock_acquire+0x7d80/0x7d80 [ 297.926824][T10238] should_fail_ex+0x394/0x4c0 [ 297.931509][T10238] _copy_from_user+0x2f/0xe0 [ 297.936398][T10238] bpf_prog_test_run_skb+0x267/0x18f0 [ 297.941872][T10238] ? __fget_files+0x28/0x460 [ 297.946496][T10238] ? __fget_files+0x3fc/0x460 [ 297.951272][T10238] ? cpu_online+0x60/0x60 [ 297.955609][T10238] bpf_prog_test_run+0x31f/0x390 [ 297.960580][T10238] __sys_bpf+0x49d/0x890 [ 297.965066][T10238] ? bpf_link_show_fdinfo+0x390/0x390 [ 297.970971][T10238] ? lock_chain_count+0x20/0x20 [ 297.976830][T10238] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 297.983691][T10238] __x64_sys_bpf+0x7c/0x90 [ 297.988831][T10238] do_syscall_64+0x55/0xb0 [ 297.993453][T10238] ? clear_bhb_loop+0x40/0x90 [ 297.998151][T10238] ? clear_bhb_loop+0x40/0x90 [ 298.003042][T10238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.008948][T10238] RIP: 0033:0x7fdb5759e0d9 [ 298.013736][T10238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.033529][T10238] RSP: 002b:00007fdb58525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.042023][T10238] RAX: ffffffffffffffda RBX: 00007fdb57825fa0 RCX: 00007fdb5759e0d9 [ 298.050013][T10238] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 298.058101][T10238] RBP: 00007fdb58525090 R08: 0000000000000000 R09: 0000000000000000 [ 298.066569][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.074861][T10238] R13: 00007fdb57826038 R14: 00007fdb57825fa0 R15: 00007ffebc920738 [ 298.082962][T10238] [ 298.151741][T10236] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 298.170434][T10236] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1612'. [ 298.582374][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1619'. [ 298.614679][T10253] IPv6: Can't replace route, no match found [ 299.632517][T10274] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 299.966034][T10286] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1633'. [ 300.027389][T10290] netlink: 'syz.3.1632': attribute type 21 has an invalid length. [ 300.093730][T10290] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1632'. [ 300.194273][T10292] netlink: 'syz.1.1634': attribute type 25 has an invalid length. [ 300.220972][T10292] netlink: 'syz.1.1634': attribute type 9 has an invalid length. [ 300.258387][T10292] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1634'. [ 300.501604][T10305] netlink: set zone limit has 8 unknown bytes [ 300.973348][T10318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1644'. [ 301.011796][T10318] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 301.339027][T10331] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.1649'. [ 301.392846][T10329] syzkaller0: entered promiscuous mode [ 301.406949][T10329] syzkaller0: entered allmulticast mode [ 301.443133][T10338] netlink: 'syz.0.1650': attribute type 10 has an invalid length. [ 305.302593][T10363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1659'. [ 305.357880][T10368] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1660'. [ 305.379944][T10363] hsr_slave_0: left promiscuous mode [ 305.410104][T10363] hsr_slave_1: left promiscuous mode [ 305.545089][T10368] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1660'. [ 305.729852][T10377] syzkaller0: entered promiscuous mode [ 305.736364][T10377] syzkaller0: entered allmulticast mode [ 309.211459][T10409] netlink: 'syz.1.1676': attribute type 2 has an invalid length. [ 309.221184][T10409] netlink: 'syz.1.1676': attribute type 8 has an invalid length. [ 309.229621][T10409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1676'. [ 309.537457][T10421] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1681'. [ 310.241387][T10448] syzkaller0: entered promiscuous mode [ 310.301528][T10448] syzkaller0: entered allmulticast mode [ 312.675437][T10471] netlink: 'syz.3.1696': attribute type 21 has an invalid length. [ 312.683745][T10471] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.691572][T10471] IPv6: Can't replace route, no match found [ 313.211269][T10488] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1702'. [ 313.237279][T10495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1704'. [ 313.409243][T10504] netlink: 'syz.3.1707': attribute type 21 has an invalid length. [ 313.430454][T10504] IPv6: Can't replace route, no match found [ 313.476722][T10504] netlink: 'syz.3.1707': attribute type 10 has an invalid length. [ 313.583976][T10509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1709'. [ 313.778737][T10515] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1712'. [ 313.842213][T10513] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1710'. [ 314.123992][T10530] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1718'. [ 314.243607][T10534] netlink: 'syz.3.1718': attribute type 10 has an invalid length. [ 314.340850][T10534] bond0: (slave bridge_slave_1): Releasing backup interface [ 314.730084][T10549] FAULT_INJECTION: forcing a failure. [ 314.730084][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 314.771582][T10549] CPU: 1 PID: 10549 Comm: syz.1.1725 Not tainted syzkaller #0 [ 314.779128][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.789277][T10549] Call Trace: [ 314.792763][T10549] [ 314.796228][T10549] dump_stack_lvl+0x18c/0x250 [ 314.800946][T10549] ? show_regs_print_info+0x20/0x20 [ 314.806286][T10549] ? load_image+0x420/0x420 [ 314.810843][T10549] ? __might_sleep+0xe0/0xe0 [ 314.815475][T10549] ? __lock_acquire+0x7d80/0x7d80 [ 314.820506][T10549] ? perf_trace_preemptirq_template+0x269/0x330 [ 314.826843][T10549] should_fail_ex+0x394/0x4c0 [ 314.831562][T10549] should_failslab+0x9/0x20 [ 314.836107][T10549] slab_pre_alloc_hook+0x59/0x300 [ 314.841169][T10549] ? sk_prot_alloc+0xe7/0x210 [ 314.845853][T10549] ? sk_prot_alloc+0xe7/0x210 [ 314.850564][T10549] __kmem_cache_alloc_node+0x53/0x250 [ 314.856090][T10549] ? sk_prot_alloc+0xe7/0x210 [ 314.860818][T10549] __kmalloc+0xa7/0x240 [ 314.865020][T10549] sk_prot_alloc+0xe7/0x210 [ 314.869551][T10549] ? sk_alloc+0x24/0x350 [ 314.873803][T10549] sk_alloc+0x3a/0x350 [ 314.877873][T10549] ? bpf_ctx_init+0x154/0x190 [ 314.882676][T10549] bpf_prog_test_run_skb+0x371/0x18f0 [ 314.888085][T10549] ? __fget_files+0x28/0x460 [ 314.892718][T10549] ? __fget_files+0x3fc/0x460 [ 314.897433][T10549] ? cpu_online+0x60/0x60 [ 314.901791][T10549] bpf_prog_test_run+0x31f/0x390 [ 314.906731][T10549] __sys_bpf+0x49d/0x890 [ 314.910977][T10549] ? bpf_link_show_fdinfo+0x390/0x390 [ 314.916531][T10549] ? lock_chain_count+0x20/0x20 [ 314.921421][T10549] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 314.927443][T10549] __x64_sys_bpf+0x7c/0x90 [ 314.931860][T10549] do_syscall_64+0x55/0xb0 [ 314.936707][T10549] ? clear_bhb_loop+0x40/0x90 [ 314.941394][T10549] ? clear_bhb_loop+0x40/0x90 [ 314.946087][T10549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.952181][T10549] RIP: 0033:0x7fdb5759e0d9 [ 314.956604][T10549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.977005][T10549] RSP: 002b:00007fdb58525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.985445][T10549] RAX: ffffffffffffffda RBX: 00007fdb57825fa0 RCX: 00007fdb5759e0d9 [ 314.993422][T10549] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 315.001393][T10549] RBP: 00007fdb58525090 R08: 0000000000000000 R09: 0000000000000000 [ 315.009363][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.017356][T10549] R13: 00007fdb57826038 R14: 00007fdb57825fa0 R15: 00007ffebc920738 [ 315.025340][T10549] [ 315.193709][T10553] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1726'. [ 315.263400][T10555] netlink: 'syz.3.1728': attribute type 10 has an invalid length. [ 315.274310][T10555] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1728'. [ 315.287748][T10557] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 315.299515][T10557] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 315.311010][T10557] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 315.540364][T10568] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 315.567240][T10570] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1733'. [ 315.584499][T10570] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1733'. [ 315.600764][T10570] tipc: Started in network mode [ 315.610637][T10570] tipc: Node identity b, cluster identity 73 [ 315.617417][T10570] tipc: Node number set to 11 [ 315.663431][T10568] tap0: tun_chr_ioctl cmd 1074820166 [ 315.674918][T10568] netlink: 'syz.2.1732': attribute type 17 has an invalid length. [ 315.712820][T10568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.844973][T10573] sit0: entered allmulticast mode [ 315.957373][T10581] sit0: entered promiscuous mode [ 316.114992][T10583] netlink: 'syz.3.1737': attribute type 21 has an invalid length. [ 316.655952][T10603] netlink: 'syz.1.1739': attribute type 29 has an invalid length. [ 316.784963][T10603] netlink: 'syz.1.1739': attribute type 29 has an invalid length. [ 316.899292][T10624] netlink: 'syz.1.1739': attribute type 29 has an invalid length. [ 317.020438][T10640] netlink: 'syz.1.1739': attribute type 29 has an invalid length. [ 317.308821][T10649] syzkaller0: entered promiscuous mode [ 317.319184][T10649] syzkaller0: entered allmulticast mode [ 317.419823][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.426935][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.245475][T10672] __nla_validate_parse: 3 callbacks suppressed [ 320.245490][T10672] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1752'. [ 320.261887][T10677] validate_nla: 1 callbacks suppressed [ 320.261903][T10677] netlink: 'syz.0.1753': attribute type 3 has an invalid length. [ 320.284157][T10677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1753'. [ 320.299313][T10677] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 320.489030][T10687] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1757'. [ 320.823628][T10689] sit0: left promiscuous mode [ 321.311242][T10698] sit0: entered promiscuous mode [ 321.616626][T10707] syzkaller0: entered promiscuous mode [ 321.622206][T10707] syzkaller0: entered allmulticast mode [ 321.770713][T10715] netlink: 'syz.1.1766': attribute type 46 has an invalid length. [ 321.780446][T10715] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1766'. [ 323.545687][T10718] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1767'. [ 323.728588][T10730] netlink: 'syz.2.1772': attribute type 2 has an invalid length. [ 323.761520][T10730] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 323.779224][T10730] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1772'. [ 323.791309][T10733] ref_ctr_offset mismatch. inode: 0x8d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 323.969414][T10730] sit0: left promiscuous mode [ 323.986694][T10732] delete_channel: no stack [ 324.175094][T10746] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1776'. [ 325.089056][T10768] netlink: 'syz.2.1785': attribute type 10 has an invalid length. [ 325.129116][T10768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1785'. [ 325.360778][T10776] syzkaller0: entered promiscuous mode [ 325.372289][T10776] syzkaller0: entered allmulticast mode [ 329.068861][T10800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1803'. [ 329.542453][T10825] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.1806'. [ 329.588851][T10825] syzkaller0: entered promiscuous mode [ 329.594603][T10825] syzkaller0: entered allmulticast mode [ 330.198076][T10845] netlink: 'syz.0.1816': attribute type 21 has an invalid length. [ 330.212344][T10845] netlink: 'syz.0.1816': attribute type 7 has an invalid length. [ 330.585681][T10863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1823'. [ 330.603832][T10863] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 330.705956][T10868] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1825'. [ 330.853186][T10876] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 330.882154][T10879] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1829'. [ 330.942865][T10879] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1829'. [ 331.076391][T10881] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1831'. [ 331.288960][T10892] netlink: 'syz.2.1835': attribute type 1 has an invalid length. [ 331.332959][T10892] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1835'. [ 331.350306][T10891] netlink: 'syz.2.1835': attribute type 1 has an invalid length. [ 331.368695][T10893] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.1836'. [ 331.381063][T10891] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1835'. [ 331.446041][T10890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.463334][T10890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.479328][T10890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.516780][T10890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.654395][T10894] syzkaller0: entered promiscuous mode [ 331.659941][T10894] syzkaller0: entered allmulticast mode [ 331.780685][T10901] netlink: 'syz.3.1839': attribute type 17 has an invalid length. [ 331.809839][T10901] netlink: 'syz.3.1839': attribute type 16 has an invalid length. [ 332.465748][T10912] cgroup: fork rejected by pids controller in /syz3 [ 333.055268][T10932] netlink: 'syz.2.1852': attribute type 17 has an invalid length. [ 333.083040][T10932] netlink: 'syz.2.1852': attribute type 16 has an invalid length. [ 333.634676][T10949] FAULT_INJECTION: forcing a failure. [ 333.634676][T10949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.653185][T10949] CPU: 1 PID: 10949 Comm: syz.2.1860 Not tainted syzkaller #0 [ 333.660747][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.670844][T10949] Call Trace: [ 333.674153][T10949] [ 333.677110][T10949] dump_stack_lvl+0x18c/0x250 [ 333.681826][T10949] ? show_regs_print_info+0x20/0x20 [ 333.687444][T10949] ? load_image+0x420/0x420 [ 333.692051][T10949] ? __might_fault+0xaa/0x120 [ 333.696771][T10949] ? __lock_acquire+0x7d80/0x7d80 [ 333.701841][T10949] ? bpf_percpu_hash_update+0x2b/0x200 [ 333.707344][T10949] ? __virt_addr_valid+0x10c/0x380 [ 333.712515][T10949] should_fail_ex+0x394/0x4c0 [ 333.717260][T10949] _copy_from_user+0x2f/0xe0 [ 333.722237][T10949] generic_map_update_batch+0x58c/0x800 [ 333.728083][T10949] ? rcu_read_unlock+0xa0/0xa0 [ 333.732941][T10949] ? __fdget+0x180/0x210 [ 333.737580][T10949] ? rcu_read_unlock+0xa0/0xa0 [ 333.742773][T10949] bpf_map_do_batch+0x3f2/0x600 [ 333.747864][T10949] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 333.754591][T10949] __sys_bpf+0x381/0x890 [ 333.758855][T10949] ? bpf_link_show_fdinfo+0x390/0x390 [ 333.764285][T10949] ? lock_chain_count+0x20/0x20 [ 333.769710][T10949] __x64_sys_bpf+0x7c/0x90 [ 333.774151][T10949] do_syscall_64+0x55/0xb0 [ 333.778680][T10949] ? clear_bhb_loop+0x40/0x90 [ 333.783379][T10949] ? clear_bhb_loop+0x40/0x90 [ 333.788061][T10949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.794227][T10949] RIP: 0033:0x7f56ce39e0d9 [ 333.798959][T10949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.819743][T10949] RSP: 002b:00007f56cf1dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.828288][T10949] RAX: ffffffffffffffda RBX: 00007f56ce625fa0 RCX: 00007f56ce39e0d9 [ 333.836361][T10949] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 333.845132][T10949] RBP: 00007f56cf1dd090 R08: 0000000000000000 R09: 0000000000000000 [ 333.853644][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.861627][T10949] R13: 00007f56ce626038 R14: 00007f56ce625fa0 R15: 00007fff4aca3138 [ 333.869710][T10949] [ 334.116697][T10954] __nla_validate_parse: 4 callbacks suppressed [ 334.116716][T10954] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1863'. [ 334.293663][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.304816][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.315443][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.325311][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.338556][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.342466][T10959] syzkaller0: entered promiscuous mode [ 334.351626][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.369300][T10959] syzkaller0: entered allmulticast mode [ 334.527817][T10963] netlink: 'syz.0.1866': attribute type 17 has an invalid length. [ 334.537698][T10963] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1866'. [ 336.464842][ T5786] Bluetooth: hci1: command tx timeout [ 336.542021][T10981] validate_nla: 1 callbacks suppressed [ 336.542036][T10981] netlink: 'syz.1.1872': attribute type 21 has an invalid length. [ 336.560712][T10981] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1872'. [ 336.715716][T10987] netlink: 'syz.1.1874': attribute type 10 has an invalid length. [ 336.730419][T10987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1874'. [ 336.789495][ T5786] Bluetooth: hci3: ISO packet for unknown connection handle 50 [ 337.128629][T10960] chnl_net:caif_netlink_parms(): no params data found [ 337.358139][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.383025][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.403732][T10960] bridge_slave_0: entered allmulticast mode [ 337.411139][T10960] bridge_slave_0: entered promiscuous mode [ 337.462169][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.474965][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.488891][T10960] bridge_slave_1: entered allmulticast mode [ 337.502387][T10960] bridge_slave_1: entered promiscuous mode [ 337.510250][T11019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1884'. [ 337.576125][T10960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.610993][T10960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.682482][T11025] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1885'. [ 337.691786][T10960] team0: Port device team_slave_0 added [ 337.698637][T11025] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.1885'. [ 337.712207][T10960] team0: Port device team_slave_1 added [ 337.815291][T10960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.822391][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.872808][T10960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.886850][T10960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.900758][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.960341][T10960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.004324][T11034] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1888'. [ 338.070605][ T7834] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.237400][T10960] hsr_slave_0: entered promiscuous mode [ 338.278404][T10960] hsr_slave_1: entered promiscuous mode [ 338.352946][T10960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.390969][T10960] Cannot create hsr debugfs directory [ 338.397809][T11045] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1893'. [ 338.452002][ T7834] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.532786][ T5786] Bluetooth: hci1: command tx timeout [ 338.648386][ T7834] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.745371][T11057] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1897'. [ 338.852680][ T7834] bond0: (slave netdevsim0): Releasing backup interface [ 338.878176][ T7834] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.972289][T11067] netlink: 'syz.2.1900': attribute type 10 has an invalid length. [ 339.647910][T11069] netlink: 'syz.2.1900': attribute type 3 has an invalid length. [ 339.743391][T11069] netlink: 'syz.2.1900': attribute type 1 has an invalid length. [ 339.770894][T11069] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.1900'. [ 340.613568][ T5786] Bluetooth: hci1: command tx timeout [ 340.955177][ T7834] tipc: Left network mode [ 341.388668][T11085] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.1905'. [ 341.443192][T11084] delete_channel: no stack [ 341.727858][T11102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1910'. [ 341.931010][T11108] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1911'. [ 342.186774][T11104] syzkaller0: entered promiscuous mode [ 342.192320][T11104] syzkaller0: entered allmulticast mode [ 342.692861][ T5786] Bluetooth: hci1: command tx timeout [ 342.912096][T11122] netlink: 'syz.2.1914': attribute type 2 has an invalid length. [ 346.221808][T11138] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 346.261205][T11138] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 346.282019][T11138] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 346.301126][T11138] team0: Port device netdevsim0 added [ 346.321226][T11139] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 346.339368][T11139] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 346.373359][T11139] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 346.449619][T11139] team0: Port device netdevsim0 removed [ 346.459921][T11139] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 346.597182][T10960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.731421][T10960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.751804][T11165] netlink: 'syz.2.1923': attribute type 21 has an invalid length. [ 346.767657][T11165] netlink: 'syz.2.1923': attribute type 7 has an invalid length. [ 346.793153][T10960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.833532][T10960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.973558][T11171] netlink: 'syz.1.1925': attribute type 2 has an invalid length. [ 347.943034][T11185] netlink: 'syz.2.1930': attribute type 25 has an invalid length. [ 347.963048][T11185] netlink: 'syz.2.1930': attribute type 9 has an invalid length. [ 347.983881][T11185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1930'. [ 348.077087][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.096574][T11191] netlink: 'syz.0.1932': attribute type 10 has an invalid length. [ 348.276250][T10960] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.300579][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.308912][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.379347][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.407306][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.429715][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.440570][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.460576][ T7834] bridge_slave_0: left allmulticast mode [ 348.467167][ T7834] bridge_slave_0: left promiscuous mode [ 348.474080][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.543843][ T7834] veth1_macvtap: left promiscuous mode [ 348.550445][ T7834] veth0_vlan: left promiscuous mode [ 349.313453][ T7834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.647457][ T7834] bond0 (unregistering): Released all slaves [ 349.760456][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.767687][ T7841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.985291][T11215] netlink: 'syz.0.1940': attribute type 2 has an invalid length. [ 350.540283][T11219] netlink: 'syz.1.1943': attribute type 25 has an invalid length. [ 350.651548][T11219] netlink: 'syz.1.1943': attribute type 9 has an invalid length. [ 350.710733][T11219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1943'. [ 350.796697][T10960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.881139][T11222] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 351.065717][T10960] veth0_vlan: entered promiscuous mode [ 351.115197][T10960] veth1_vlan: entered promiscuous mode [ 351.209550][T10960] veth0_macvtap: entered promiscuous mode [ 351.316493][T11234] syzkaller0: entered promiscuous mode [ 351.335161][T11234] syzkaller0: entered allmulticast mode [ 351.347488][T10960] veth1_macvtap: entered promiscuous mode [ 351.447578][T11241] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1951'. [ 353.061855][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.073156][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.084713][T10960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.118752][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.143285][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.170728][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.208347][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.235212][T10960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.311707][T11253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1954'. [ 353.366015][T10960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.375089][T10960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.384617][T10960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.393527][T10960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.559640][ T7821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.593405][ T7821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.638464][T11264] netlink: 'syz.0.1956': attribute type 25 has an invalid length. [ 353.647862][T11264] netlink: 'syz.0.1956': attribute type 9 has an invalid length. [ 353.666050][T11268] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1959'. [ 353.667593][T11264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1956'. [ 353.710185][ T7833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.725913][ T7833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.324875][T11284] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 354.699514][T11306] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1974'. [ 354.747492][T11310] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1976'. [ 354.938198][T11316] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1979'. [ 354.979141][T11323] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1982'. [ 355.983054][T11361] netlink: 'syz.1.1993': attribute type 10 has an invalid length. [ 356.250660][T11371] FAULT_INJECTION: forcing a failure. [ 356.250660][T11371] name failslab, interval 1, probability 0, space 0, times 0 [ 356.264193][T11371] CPU: 0 PID: 11371 Comm: syz.3.1997 Not tainted syzkaller #0 [ 356.271986][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.282065][T11371] Call Trace: [ 356.285371][T11371] [ 356.288327][T11371] dump_stack_lvl+0x18c/0x250 [ 356.293141][T11371] ? show_regs_print_info+0x20/0x20 [ 356.298375][T11371] ? load_image+0x420/0x420 [ 356.302949][T11371] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 356.309022][T11371] ? lock_chain_count+0x20/0x20 [ 356.313951][T11371] should_fail_ex+0x394/0x4c0 [ 356.318814][T11371] should_failslab+0x9/0x20 [ 356.323729][T11371] slab_pre_alloc_hook+0x59/0x300 [ 356.328850][T11371] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.335155][T11371] kmem_cache_alloc+0x5a/0x2c0 [ 356.339959][T11371] ? skb_clone+0x1eb/0x370 [ 356.344468][T11371] skb_clone+0x1eb/0x370 [ 356.348748][T11371] bpf_clone_redirect+0x16d/0x4a0 [ 356.353917][T11371] bpf_prog_208b094576c80b22+0x5e/0x63 [ 356.359416][T11371] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 356.365443][T11371] ? __lock_acquire+0x7d80/0x7d80 [ 356.370590][T11371] ? lock_chain_count+0x20/0x20 [ 356.375560][T11371] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 356.381814][T11371] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 356.387104][T11371] ? ktime_get+0x7f/0x280 [ 356.391441][T11371] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 356.397682][T11371] ? ktime_get_real_ts64+0x440/0x440 [ 356.402975][T11371] ? __x64_sys_bpf+0x7c/0x90 [ 356.407581][T11371] ? __local_bh_disable_ip+0x108/0x1a0 [ 356.413177][T11371] ? __cant_sleep+0x220/0x220 [ 356.417873][T11371] ? read_tsc+0x9/0x20 [ 356.422034][T11371] ? ktime_get+0x24b/0x280 [ 356.426576][T11371] ? bpf_test_run+0x174/0x870 [ 356.431329][T11371] bpf_test_run+0x2df/0x870 [ 356.435835][T11371] ? lock_chain_count+0x20/0x20 [ 356.441029][T11371] ? bpf_test_run+0x174/0x870 [ 356.445727][T11371] ? dst_hold+0x70/0x70 [ 356.449928][T11371] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 356.455362][T11371] ? cpu_online+0x60/0x60 [ 356.459711][T11371] bpf_prog_test_run+0x31f/0x390 [ 356.464758][T11371] __sys_bpf+0x49d/0x890 [ 356.469018][T11371] ? bpf_link_show_fdinfo+0x390/0x390 [ 356.474397][T11371] ? lock_chain_count+0x20/0x20 [ 356.479262][T11371] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 356.485507][T11371] __x64_sys_bpf+0x7c/0x90 [ 356.489946][T11371] do_syscall_64+0x55/0xb0 [ 356.494358][T11371] ? clear_bhb_loop+0x40/0x90 [ 356.499028][T11371] ? clear_bhb_loop+0x40/0x90 [ 356.503702][T11371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.510201][T11371] RIP: 0033:0x7f6ac2b9e0d9 [ 356.514720][T11371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.534370][T11371] RSP: 002b:00007f6ac3ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.543061][T11371] RAX: ffffffffffffffda RBX: 00007f6ac2e25fa0 RCX: 00007f6ac2b9e0d9 [ 356.551838][T11371] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 356.560258][T11371] RBP: 00007f6ac3ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 356.568230][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.576825][T11371] R13: 00007f6ac2e26038 R14: 00007f6ac2e25fa0 R15: 00007ffdda99c648 [ 356.584866][T11371] [ 356.898892][T11384] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2002'. [ 357.001006][T11392] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2005'. [ 357.081955][T11392] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 357.110612][T11392] bridge_slave_1: entered promiscuous mode [ 357.157157][T11392] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 357.948599][T11422] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.2012'. [ 358.703946][T11439] netlink: 'syz.3.2022': attribute type 25 has an invalid length. [ 358.723495][T11439] netlink: 'syz.3.2022': attribute type 9 has an invalid length. [ 358.732128][T11439] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2022'. [ 358.766572][T11442] netlink: 'syz.2.2023': attribute type 10 has an invalid length. [ 358.798830][T11442] bond0: (slave netdevsim0): Releasing backup interface [ 358.825451][T11442] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 358.844324][T11442] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 358.873705][T11442] team0: Port device netdevsim0 added [ 358.879972][T11446] netlink: 'syz.2.2023': attribute type 10 has an invalid length. [ 358.912439][T11446] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 358.923626][T11446] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 358.991712][T11446] team0: Port device netdevsim0 removed [ 359.007308][T11446] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 359.021910][T11448] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2026'. [ 359.036135][T11448] : renamed from caif0 [ 359.066098][T11448] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 359.438775][T11463] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2031'. [ 359.482484][T11463] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2031'. [ 360.367824][T11492] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2041'. [ 360.423229][T11492] hsr_slave_0: left promiscuous mode [ 360.441164][T11492] hsr_slave_1: left promiscuous mode [ 361.207986][T11515] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.2049'. [ 362.268019][T11522] netlink: 'syz.2.2051': attribute type 10 has an invalid length. [ 362.292978][T11522] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2051'. [ 362.313395][T11523] netlink: 'syz.2.2051': attribute type 21 has an invalid length. [ 364.182485][T11574] FAULT_INJECTION: forcing a failure. [ 364.182485][T11574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.203019][T11574] CPU: 1 PID: 11574 Comm: syz.3.2075 Not tainted syzkaller #0 [ 364.210558][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.220666][T11574] Call Trace: [ 364.223985][T11574] [ 364.226946][T11574] dump_stack_lvl+0x18c/0x250 [ 364.231665][T11574] ? show_regs_print_info+0x20/0x20 [ 364.236900][T11574] ? load_image+0x420/0x420 [ 364.241456][T11574] ? __might_fault+0xaa/0x120 [ 364.246172][T11574] ? __lock_acquire+0x7d80/0x7d80 [ 364.251322][T11574] ? bpf_percpu_hash_update+0x2b/0x200 [ 364.256917][T11574] ? __virt_addr_valid+0x10c/0x380 [ 364.262087][T11574] should_fail_ex+0x394/0x4c0 [ 364.266829][T11574] _copy_from_user+0x2f/0xe0 [ 364.271463][T11574] generic_map_update_batch+0x58c/0x800 [ 364.277083][T11574] ? rcu_read_unlock+0xa0/0xa0 [ 364.282110][T11574] ? __fdget+0x180/0x210 [ 364.286430][T11574] ? rcu_read_unlock+0xa0/0xa0 [ 364.291270][T11574] bpf_map_do_batch+0x3f2/0x600 [ 364.296170][T11574] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 364.302732][T11574] __sys_bpf+0x381/0x890 [ 364.307029][T11574] ? bpf_link_show_fdinfo+0x390/0x390 [ 364.312589][T11574] ? lock_chain_count+0x20/0x20 [ 364.317501][T11574] __x64_sys_bpf+0x7c/0x90 [ 364.321959][T11574] do_syscall_64+0x55/0xb0 [ 364.326421][T11574] ? clear_bhb_loop+0x40/0x90 [ 364.331130][T11574] ? clear_bhb_loop+0x40/0x90 [ 364.335832][T11574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.341774][T11574] RIP: 0033:0x7f6ac2b9e0d9 [ 364.346247][T11574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.366073][T11574] RSP: 002b:00007f6ac3ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.374523][T11574] RAX: ffffffffffffffda RBX: 00007f6ac2e25fa0 RCX: 00007f6ac2b9e0d9 [ 364.382506][T11574] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 364.390945][T11574] RBP: 00007f6ac3ad9090 R08: 0000000000000000 R09: 0000000000000000 [ 364.398947][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.406964][T11574] R13: 00007f6ac2e26038 R14: 00007f6ac2e25fa0 R15: 00007ffdda99c648 [ 364.415453][T11574] [ 364.756474][T11580] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2078'. [ 365.125140][T11588] netlink: 'syz.3.2078': attribute type 21 has an invalid length. [ 365.199584][T11588] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2078'. [ 365.301344][T11601] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2084'. [ 365.850898][T11610] syzkaller0: entered promiscuous mode [ 365.893081][T11610] syzkaller0: entered allmulticast mode [ 368.740529][T11649] netlink: 64519 bytes leftover after parsing attributes in process `syz.0.2098'. [ 368.750525][T11662] netlink: 'syz.2.2103': attribute type 10 has an invalid length. [ 369.992492][T11693] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2113'. [ 370.146973][T11697] netlink: 'syz.2.2113': attribute type 21 has an invalid length. [ 370.156878][T11697] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2113'. [ 370.269496][T11701] netlink: 'syz.1.2116': attribute type 10 has an invalid length. [ 370.304181][T11701] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.347951][T11703] netlink: 'syz.0.2117': attribute type 10 has an invalid length. [ 370.373928][T11703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2117'. [ 370.410466][T11703] bridge0: port 2(team0) entered blocking state [ 370.436861][T11703] bridge0: port 2(team0) entered disabled state [ 371.111201][T11732] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2127'. [ 371.441742][T11738] netlink: 'syz.0.2127': attribute type 21 has an invalid length. [ 371.493350][T11738] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2127'. [ 371.891904][T11746] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2134'. [ 371.928689][T11746] netlink: 'syz.3.2134': attribute type 10 has an invalid length. [ 371.963216][T11746] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.992861][T11746] bridge_slave_1: left allmulticast mode [ 371.998865][T11746] bridge_slave_1: left promiscuous mode [ 372.006929][T11746] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.061755][T11746] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 372.314669][T11763] netlink: 'syz.2.2138': attribute type 10 has an invalid length. [ 372.341046][T11763] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2138'. [ 372.419002][T11761] netlink: 'syz.3.2139': attribute type 10 has an invalid length. [ 372.439764][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.574917][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.583977][T11761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.659075][T11761] team0: Port device bridge0 added [ 372.809994][T11761] syz.3.2139 (11761) used greatest stack depth: 18664 bytes left [ 372.933103][T11783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2146'. [ 372.965761][T11786] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2148'. [ 373.398606][T11786] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2148'. [ 373.434601][T11786] tipc: Started in network mode [ 373.450544][T11786] tipc: Node identity b, cluster identity 73 [ 373.479623][T11786] tipc: Node number set to 11 [ 373.868295][T11801] netlink: 'syz.3.2154': attribute type 21 has an invalid length. [ 374.681763][T11837] netlink: 'syz.0.2169': attribute type 25 has an invalid length. [ 374.699419][T11837] netlink: 'syz.0.2169': attribute type 9 has an invalid length. [ 374.785387][T11841] team0: Port device netdevsim0 added [ 374.817008][T11841] team0: Port device netdevsim0 removed [ 374.836149][T11841] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 374.887707][T11843] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 375.245530][T11857] __nla_validate_parse: 4 callbacks suppressed [ 375.245571][T11857] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2176'. [ 375.357140][T11863] validate_nla: 2 callbacks suppressed [ 375.357160][T11863] netlink: 'syz.1.2180': attribute type 21 has an invalid length. [ 375.371096][T11863] netlink: 'syz.1.2180': attribute type 7 has an invalid length. [ 375.483960][T11866] netlink: 'syz.2.2181': attribute type 10 has an invalid length. [ 375.492571][T11866] team0: Device bridge0 is already an upper device of the team interface [ 377.098406][T11897] netlink: 'syz.1.2194': attribute type 10 has an invalid length. [ 377.260681][T11902] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.2195'. [ 377.895882][T11925] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2205'. [ 378.913871][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.920947][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.297314][T11941] netlink: 'syz.0.2208': attribute type 10 has an invalid length. [ 379.359454][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.429678][T11944] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2211'. [ 379.609170][T11944] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2211'. [ 380.077185][T11961] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2218'. [ 380.380591][T11975] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2224'. [ 381.144421][T12001] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2234'. [ 381.257219][T12002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.987390][T12032] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.2248'. [ 382.677622][T12027] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2246'. [ 382.691393][T12042] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2252'. [ 383.651669][T12049] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2254'. [ 383.671209][T12056] netlink: 'syz.0.2254': attribute type 21 has an invalid length. [ 383.703768][T12056] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2254'. [ 383.797072][T12060] syzkaller0: entered promiscuous mode [ 383.802970][T12060] syzkaller0: entered allmulticast mode [ 385.870345][T12079] netlink: 'syz.3.2263': attribute type 10 has an invalid length. [ 385.879723][T12079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2263'. [ 385.889021][T12079] team0: entered promiscuous mode [ 385.895308][T12079] team_slave_0: entered promiscuous mode [ 385.901384][T12079] team_slave_1: entered promiscuous mode [ 385.907634][T12079] bridge0: entered promiscuous mode [ 385.913262][T12079] team0: entered allmulticast mode [ 385.932928][T12079] team_slave_0: entered allmulticast mode [ 385.939447][T12079] team_slave_1: entered allmulticast mode [ 385.949611][T12079] bridge0: entered allmulticast mode [ 385.959539][T12079] bridge0: port 2(team0) entered blocking state [ 385.967842][T12079] bridge0: port 2(team0) entered disabled state [ 385.979661][T12083] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2264'. [ 386.117389][T12087] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2266'. [ 386.314205][T12097] netlink: 'syz.3.2266': attribute type 21 has an invalid length. [ 386.323339][T12096] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2270'. [ 386.350244][T12097] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2266'. [ 386.427046][T12096] netlink: 'syz.1.2270': attribute type 10 has an invalid length. [ 386.450439][T12096] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 387.125885][T12114] syzkaller0: create flow: hash 302015495 index 1 [ 387.184237][ T7834] syzkaller0: tun_net_xmit 76 [ 387.190009][ T7834] syzkaller0: tun_net_xmit 48 [ 387.201126][ T9] syzkaller0: tun_net_xmit 76 [ 387.612167][T12105] syzkaller0: delete flow: hash 302015495 index 1 [ 390.226623][T12134] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2283'. [ 390.236136][T12135] netlink: 'syz.2.2283': attribute type 21 has an invalid length. [ 390.245049][T12135] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2283'. [ 390.254798][T12139] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2284'. [ 390.264307][T12141] netlink: 'syz.1.2284': attribute type 21 has an invalid length. [ 390.272255][T12141] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2284'. [ 390.951440][T12183] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2298'. [ 391.228022][T12192] netlink: 'syz.0.2298': attribute type 21 has an invalid length. [ 391.255289][T12192] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2298'. [ 391.377137][T12194] syzkaller0: entered promiscuous mode [ 391.382671][T12194] syzkaller0: entered allmulticast mode [ 391.528006][T12199] À: port 1(vlan0) entered blocking state [ 391.543991][T12199] À: port 1(vlan0) entered disabled state [ 391.563350][T12199] vlan0: entered allmulticast mode [ 391.568713][T12199] veth0_vlan: entered allmulticast mode [ 391.590218][T12201] netlink: 'syz.0.2307': attribute type 4 has an invalid length. [ 391.604039][T12199] vlan0: entered promiscuous mode [ 391.610208][T12201] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2307'. [ 394.338531][T12224] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2317'. [ 394.350421][T12245] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2324'. [ 394.370815][T12245] hsr_slave_0: left promiscuous mode [ 394.388177][T12245] hsr_slave_1: left promiscuous mode [ 395.364151][T12273] netlink: 'syz.1.2336': attribute type 3 has an invalid length. [ 395.371982][T12273] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2336'. [ 395.402921][T12273] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 395.512615][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 395.523088][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 395.531348][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.539734][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.557192][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 395.565624][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 395.827298][T12286] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2339'. [ 395.926421][T12289] syzkaller0: entered promiscuous mode [ 395.932234][T12289] syzkaller0: entered allmulticast mode [ 395.959229][T12291] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2342'. [ 396.110595][T12297] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2344'. [ 397.002336][T12316] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2353'. [ 397.655201][ T5786] Bluetooth: hci2: command tx timeout [ 398.145976][T12297] netlink: 'syz.1.2344': attribute type 21 has an invalid length. [ 398.154008][T12297] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2344'. [ 398.316801][T12274] chnl_net:caif_netlink_parms(): no params data found [ 398.530767][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.564776][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.572426][T12274] bridge_slave_0: entered allmulticast mode [ 398.584274][T12274] bridge_slave_0: entered promiscuous mode [ 398.594304][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.601881][T12274] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.609583][T12274] bridge_slave_1: entered allmulticast mode [ 398.617707][T12274] bridge_slave_1: entered promiscuous mode [ 398.642849][T12340] netlink: 'syz.1.2361': attribute type 10 has an invalid length. [ 398.650782][T12340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2361'. [ 398.715661][T12338] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2360'. [ 398.743324][T12341] netlink: 'syz.3.2360': attribute type 9 has an invalid length. [ 398.816683][T12274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.834388][T12274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.864050][T12274] team0: Port device team_slave_0 added [ 398.871765][T12274] team0: Port device team_slave_1 added [ 398.907061][T12274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.914469][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.955816][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.985360][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.992342][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.031219][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.093600][T12274] hsr_slave_0: entered promiscuous mode [ 399.104115][T12274] hsr_slave_1: entered promiscuous mode [ 399.221241][T12352] syzkaller0: entered promiscuous mode [ 399.228077][T12352] syzkaller0: entered allmulticast mode [ 399.638322][T12362] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.2369'. [ 399.649799][T12362] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 399.740187][ T5786] Bluetooth: hci2: command tx timeout [ 401.739589][T12387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2378'. [ 401.750359][T12387] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 401.768909][T12389] netlink: 'syz.2.2379': attribute type 10 has an invalid length. [ 401.812818][ T5786] Bluetooth: hci2: command tx timeout [ 401.876741][T12274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.027818][T12274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.465935][T12274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.508128][T12406] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2388'. [ 402.641620][T12274] bond0: (slave netdevsim0): Releasing backup interface [ 402.697433][T12274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.753608][T12406] netlink: 'syz.2.2388': attribute type 21 has an invalid length. [ 402.769774][T12406] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2388'. [ 403.903679][ T5786] Bluetooth: hci2: command tx timeout [ 405.302499][T12274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.320376][T12274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 405.333660][T12420] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2393'. [ 405.349760][T12274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.397902][T12419] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2393'. [ 405.411420][T12417] syzkaller0: entered promiscuous mode [ 405.417171][T12417] syzkaller0: entered allmulticast mode [ 405.446526][T12274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.339227][T12430] netlink: 'syz.1.2396': attribute type 10 has an invalid length. [ 407.347566][T12430] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2396'. [ 407.416519][T12274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.491204][T12274] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.524283][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.531503][ T9015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.561186][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.568610][ T7821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.616900][T12441] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2400'. [ 407.714223][T12441] netlink: 'syz.1.2400': attribute type 21 has an invalid length. [ 407.726762][T12441] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2400'. [ 407.916079][T12452] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2404'. [ 407.958367][T12452] netlink: 'syz.1.2404': attribute type 10 has an invalid length. [ 408.078284][T12274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.128384][T12274] veth0_vlan: entered promiscuous mode [ 408.154650][T12274] veth1_vlan: entered promiscuous mode [ 408.196697][T12274] veth0_macvtap: entered promiscuous mode [ 408.210317][T12274] veth1_macvtap: entered promiscuous mode [ 408.241737][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.254220][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.264323][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.274912][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.286574][T12274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.311928][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.326172][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.338108][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.349710][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.360177][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.371885][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.402144][T12274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.431343][T12274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.452076][T12274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.463111][T12274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.472208][T12274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.598625][ T6154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.618569][ T6154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.667898][ T7833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.683026][ T7833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.644790][T12480] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2413'. [ 409.979971][T12486] netlink: 'syz.3.2413': attribute type 21 has an invalid length. [ 409.988122][T12486] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2413'. [ 410.179051][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.189918][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.199130][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.209073][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.219961][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 410.229515][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.219890][T12493] syzkaller0: entered promiscuous mode [ 412.234295][T12493] syzkaller0: entered allmulticast mode [ 412.293891][ T5787] Bluetooth: hci4: command tx timeout [ 414.260616][T12521] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2425'. [ 414.270231][T12523] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2426'. [ 414.281394][T12527] netlink: 'syz.0.2426': attribute type 21 has an invalid length. [ 414.290223][T12527] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2426'. [ 414.299709][T12528] netlink: 'syz.3.2425': attribute type 21 has an invalid length. [ 414.321234][T12528] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2425'. [ 414.381296][ T5787] Bluetooth: hci4: command tx timeout [ 414.452871][T12530] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 414.488597][T12530] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 414.587553][T12536] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 414.598486][T12536] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 414.826831][T12541] netlink: 'syz.0.2430': attribute type 22 has an invalid length. [ 414.845816][T12546] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2434'. [ 414.876534][T12489] chnl_net:caif_netlink_parms(): no params data found [ 415.141734][T12489] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.171997][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.186401][T12489] bridge_slave_0: entered allmulticast mode [ 415.204274][T12489] bridge_slave_0: entered promiscuous mode [ 415.220886][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.228587][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.244752][T12489] bridge_slave_1: entered allmulticast mode [ 415.258850][T12489] bridge_slave_1: entered promiscuous mode [ 415.394961][T12489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.440176][T12489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.461993][T12555] netlink: 'syz.1.2436': attribute type 21 has an invalid length. [ 415.483274][T12555] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2436'. [ 415.575211][T12562] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 415.619801][T12562] bond0: (slave netdevsim0): Releasing backup interface [ 415.653677][T12562] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 415.670156][T12562] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 415.679970][T12562] team0: Port device netdevsim0 added [ 415.698695][T12489] team0: Port device team_slave_0 added [ 415.714618][T12564] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 415.724834][T12564] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 415.738576][T12564] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 415.845231][T12564] team0: Port device netdevsim0 removed [ 415.872426][T12564] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 415.889359][T12489] team0: Port device team_slave_1 added [ 415.929268][T12489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.941141][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.981984][T12489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.021944][T12572] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2443'. [ 416.082441][T12489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.090175][T12489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.096420][T12577] FAULT_INJECTION: forcing a failure. [ 416.096420][T12577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.125943][T12489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.150709][T12575] netlink: 'syz.3.2444': attribute type 10 has an invalid length. [ 416.160270][T12575] syz_tun: entered promiscuous mode [ 416.186021][T12577] CPU: 0 PID: 12577 Comm: syz.1.2445 Not tainted syzkaller #0 [ 416.193556][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.195205][T12575] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 416.203644][T12577] Call Trace: [ 416.203655][T12577] [ 416.203662][T12577] dump_stack_lvl+0x18c/0x250 [ 416.203691][T12577] ? show_regs_print_info+0x20/0x20 [ 416.203710][T12577] ? load_image+0x420/0x420 [ 416.220239][T12572] netlink: 'syz.0.2443': attribute type 21 has an invalid length. [ 416.223179][T12577] ? __might_fault+0xaa/0x120 [ 416.223207][T12577] ? __lock_acquire+0x7d80/0x7d80 [ 416.223230][T12577] should_fail_ex+0x394/0x4c0 [ 416.223259][T12577] _copy_from_user+0x2f/0xe0 [ 416.223280][T12577] __sys_bpf+0x23e/0x890 [ 416.223302][T12577] ? bpf_link_show_fdinfo+0x390/0x390 [ 416.223336][T12577] ? lock_chain_count+0x20/0x20 [ 416.230139][T12572] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2443'. [ 416.233031][T12577] __x64_sys_bpf+0x7c/0x90 [ 416.233061][T12577] do_syscall_64+0x55/0xb0 [ 416.233081][T12577] ? clear_bhb_loop+0x40/0x90 [ 416.233102][T12577] ? clear_bhb_loop+0x40/0x90 [ 416.233122][T12577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.233141][T12577] RIP: 0033:0x7fdb5759e0d9 [ 416.233160][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.332121][T12577] RSP: 002b:00007fdb58525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.340661][T12577] RAX: ffffffffffffffda RBX: 00007fdb57825fa0 RCX: 00007fdb5759e0d9 [ 416.349011][T12577] RDX: 0000000000000028 RSI: 0000200000003f40 RDI: 0000000000000012 [ 416.357381][T12577] RBP: 00007fdb58525090 R08: 0000000000000000 R09: 0000000000000000 [ 416.365393][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.373380][T12577] R13: 00007fdb57826038 R14: 00007fdb57825fa0 R15: 00007ffebc920738 [ 416.381722][T12577] [ 416.449169][T12489] hsr_slave_0: entered promiscuous mode [ 416.455594][ T5787] Bluetooth: hci4: command tx timeout [ 416.501842][T12489] hsr_slave_1: entered promiscuous mode [ 416.523860][T12489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.542852][T12489] Cannot create hsr debugfs directory [ 416.840022][T12489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.091525][T12489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.128132][T12606] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2456'. [ 417.140940][T12604] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2456'. [ 417.203283][T12489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.354159][T12489] bond0: (slave netdevsim0): Releasing backup interface [ 417.393503][T12489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.732499][T12489] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.794968][T12489] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.845522][T12489] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.862475][T12489] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.019148][T12489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.073380][T12489] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.118510][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.125764][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.197343][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.204681][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.536066][ T5787] Bluetooth: hci4: command tx timeout [ 418.691349][T12646] pim6reg1: entered promiscuous mode [ 418.701356][T12646] pim6reg1: entered allmulticast mode [ 418.738376][T12489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.851637][T12489] veth0_vlan: entered promiscuous mode [ 418.893758][T12489] veth1_vlan: entered promiscuous mode [ 419.006404][T12489] veth0_macvtap: entered promiscuous mode [ 419.029314][T12489] veth1_macvtap: entered promiscuous mode [ 419.080224][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.103245][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.116753][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.128787][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.138918][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.153522][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.170614][T12489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.213970][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.242812][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.263302][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.292666][T12658] validate_nla: 134 callbacks suppressed [ 419.292686][T12658] netlink: 'syz.1.2475': attribute type 3 has an invalid length. [ 419.296777][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.312563][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.316438][T12658] __nla_validate_parse: 8 callbacks suppressed [ 419.316451][T12658] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2475'. [ 419.334297][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.358105][T12489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.370740][T12489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.382659][T12489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.395031][T12489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.404254][T12489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.416919][T12489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.429592][T12489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.684313][T12666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2480'. [ 419.892130][ T7841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.909145][ T7841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.957780][T12672] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2482'. [ 419.999566][ T7846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.029908][ T7846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.134973][T12675] netlink: 'syz.0.2482': attribute type 21 has an invalid length. [ 420.175318][T12675] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2482'. [ 420.684248][T12685] netlink: 'syz.0.2486': attribute type 10 has an invalid length. [ 420.749513][T12685] team0: Device veth1_vlan failed to register rx_handler [ 420.847656][T12685] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2486'. [ 421.085079][T12687] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2487'. [ 421.599299][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.621493][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.631964][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.644717][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.652558][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 421.660384][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.127596][T12703] chnl_net:caif_netlink_parms(): no params data found [ 422.340380][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.368293][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.408219][T12703] bridge_slave_0: entered allmulticast mode [ 422.440570][T12703] bridge_slave_0: entered promiscuous mode [ 422.513956][ T7834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.571925][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.594339][T12703] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.601869][T12703] bridge_slave_1: entered allmulticast mode [ 422.628171][T12703] bridge_slave_1: entered promiscuous mode [ 422.642538][T12740] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 422.768363][ T7834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.815966][T12742] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2506'. [ 422.849600][T12703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.890329][T12703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.017010][ T7834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.156001][ T7834] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 423.193530][ T7834] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.246586][T12703] team0: Port device team_slave_0 added [ 423.271120][T12703] team0: Port device team_slave_1 added [ 423.389113][T12703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.425786][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.461247][T12703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.473149][T12756] netlink: 'syz.0.2512': attribute type 25 has an invalid length. [ 423.481279][T12756] netlink: 'syz.0.2512': attribute type 9 has an invalid length. [ 423.490788][T12756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2512'. [ 423.503115][T12703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.510203][T12703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.544841][T12703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.733948][ T5787] Bluetooth: hci0: command tx timeout [ 423.744259][T12703] hsr_slave_0: entered promiscuous mode [ 423.785947][T12703] hsr_slave_1: entered promiscuous mode [ 423.802992][T12703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.828037][T12703] Cannot create hsr debugfs directory [ 425.118093][ T7834] tipc: Left network mode [ 425.383194][T12784] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2517'. [ 425.813029][ T5787] Bluetooth: hci0: command tx timeout [ 426.236268][T12802] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2521'. [ 426.401599][T12808] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2523'. [ 426.444759][T12815] netlink: 'syz.0.2521': attribute type 21 has an invalid length. [ 426.504782][T12815] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2521'. [ 426.612159][T12819] netlink: 'syz.2.2525': attribute type 21 has an invalid length. [ 426.621155][T12819] netlink: 'syz.2.2525': attribute type 7 has an invalid length. [ 426.649965][T12808] netlink: 'syz.3.2523': attribute type 21 has an invalid length. [ 426.682597][T12808] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2523'. [ 427.219948][T12703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.234435][T12703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.251361][T12825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2526'. [ 427.278347][T12703] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.308618][T12703] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.473704][T12837] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2530'. [ 427.893444][ T5787] Bluetooth: hci0: command tx timeout [ 428.038298][T12703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.258736][T12703] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.292337][T12864] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2537'. [ 428.437820][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.487555][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.518517][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.530044][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.551269][ T7834] bridge_slave_0: left allmulticast mode [ 428.560221][ T7834] bridge_slave_0: left promiscuous mode [ 428.586567][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.792355][ T7834] veth1_macvtap: left promiscuous mode [ 428.822347][ T7834] veth1_vlan: left promiscuous mode [ 428.832293][ T7834] veth0_vlan: left promiscuous mode [ 429.720630][ T7834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.816930][ T7834] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 429.976609][ T5787] Bluetooth: hci0: command tx timeout [ 430.093794][ T7834] bond0 (unregistering): Released all slaves [ 430.197992][T12864] netlink: 'syz.2.2537': attribute type 21 has an invalid length. [ 430.206265][T12864] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2537'. [ 430.217110][T12879] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2540'. [ 430.246697][T12883] netlink: 'syz.0.2540': attribute type 21 has an invalid length. [ 430.273939][T12886] netlink: 'syz.3.2541': attribute type 21 has an invalid length. [ 430.326844][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.334085][ T7841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.413543][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.420746][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.848897][T12905] netlink: 'syz.3.2546': attribute type 10 has an invalid length. [ 430.924063][T12905] team0: Device veth1_vlan failed to register rx_handler [ 430.989075][T12909] netlink: 'syz.2.2547': attribute type 1 has an invalid length. [ 431.028244][T12909] netlink: 'syz.2.2547': attribute type 2 has an invalid length. [ 431.058723][T12911] __nla_validate_parse: 3 callbacks suppressed [ 431.058765][T12911] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2548'. [ 431.067072][T12909] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.2547'. [ 431.148609][T12905] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2546'. [ 431.429783][T12703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.812516][T12703] veth0_vlan: entered promiscuous mode [ 431.911824][T12703] veth1_vlan: entered promiscuous mode [ 432.053462][T12931] validate_nla: 10 callbacks suppressed [ 432.053481][T12931] netlink: 'syz.0.2550': attribute type 21 has an invalid length. [ 432.134637][T12931] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2550'. [ 432.211738][T12703] veth0_macvtap: entered promiscuous mode [ 432.351644][T12703] veth1_macvtap: entered promiscuous mode [ 432.400847][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.420998][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.431143][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.441864][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.466373][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.477784][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.515828][T12703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.536078][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.564532][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.576709][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.587567][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.597882][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.610397][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.632307][T12703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.649696][T12703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.661458][T12703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.704691][T12703] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.716657][T12703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.726710][T12703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.736941][T12703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.785972][T12947] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2554'. [ 432.878359][T12951] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2555'. [ 432.938825][T12951] C: renamed from team_slave_0 (while UP) [ 432.954254][T12951] netlink: 'syz.0.2555': attribute type 3 has an invalid length. [ 432.973159][T12951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2555'. [ 432.985071][T12951] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 433.099324][ T7833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.129037][ T7833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.206634][T12953] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2556'. [ 433.221421][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.246413][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.404547][T12955] netlink: 'syz.0.2557': attribute type 2 has an invalid length. [ 434.137513][T12965] netlink: 'syz.0.2559': attribute type 21 has an invalid length. [ 434.202923][T12965] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2559'. [ 434.540859][T12975] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2564'. [ 434.592575][T12980] netlink: 'syz.2.2566': attribute type 16 has an invalid length. [ 434.626033][T12980] veth1_macvtap: entered allmulticast mode [ 434.697209][T12983] netlink: 'syz.0.2564': attribute type 21 has an invalid length. [ 435.125923][T12999] netlink: 'syz.3.2572': attribute type 21 has an invalid length. [ 435.387219][T13007] netlink: 'syz.0.2575': attribute type 1 has an invalid length. [ 435.395676][T13007] netlink: 'syz.0.2575': attribute type 2 has an invalid length. [ 435.405771][T13007] netlink: 'syz.0.2575': attribute type 2 has an invalid length. [ 436.213373][T13031] __nla_validate_parse: 5 callbacks suppressed [ 436.213410][T13031] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.2583'. [ 436.221014][T13027] syzkaller0: entered promiscuous mode [ 436.262934][T13027] syzkaller0: entered allmulticast mode [ 436.274343][T13029] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2582'. [ 438.785441][T13046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2588'. [ 438.808942][T13055] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2591'. [ 438.830640][T13057] validate_nla: 10 callbacks suppressed [ 438.830660][T13057] netlink: 'syz.1.2591': attribute type 21 has an invalid length. [ 438.863146][T13057] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2591'. [ 439.099969][T13062] netlink: 'syz.3.2593': attribute type 25 has an invalid length. [ 439.119762][T13062] netlink: 'syz.3.2593': attribute type 9 has an invalid length. [ 439.151220][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2593'. [ 439.779039][T13091] netlink: 'syz.1.2603': attribute type 21 has an invalid length. [ 439.803365][T13091] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2603'. [ 439.889574][T13093] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2606'. [ 440.291695][T13110] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.2612'. [ 440.301686][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.301745][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.341383][T13115] netlink: 'syz.2.2615': attribute type 10 has an invalid length. [ 440.654855][T13127] netlink: 'syz.2.2617': attribute type 21 has an invalid length. [ 440.688687][T13125] netlink: 'syz.1.2619': attribute type 1 has an invalid length. [ 440.725037][T13127] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2617'. [ 440.770482][T13125] netlink: 'syz.1.2619': attribute type 2 has an invalid length. [ 440.799263][T13126] sit0: entered allmulticast mode [ 440.817957][T13125] netlink: 'syz.1.2619': attribute type 2 has an invalid length. [ 440.853417][T13125] netlink: 'syz.1.2619': attribute type 3 has an invalid length. [ 440.888245][T13131] sit0: entered promiscuous mode [ 441.490593][T13135] __nla_validate_parse: 1 callbacks suppressed [ 441.490612][T13135] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2621'. [ 441.532318][T13135] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2621'. [ 441.575563][T13135] bond0: (slave bond_slave_0): Releasing backup interface [ 441.640486][T13135] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 441.830873][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2625'. [ 441.862969][T13144] : renamed from caif0 [ 441.876273][T13144] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 442.177588][T13149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2627'. [ 442.520927][T13162] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2630'. [ 442.648395][T13166] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2632'. [ 442.843042][T13173] macvtap0: refused to change device tx_queue_len [ 444.081038][T13186] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2640'. [ 444.179496][T13191] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2642'. [ 444.276919][T13192] validate_nla: 12 callbacks suppressed [ 444.276939][T13192] netlink: 'syz.3.2640': attribute type 21 has an invalid length. [ 444.300499][T13192] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2640'. [ 444.370407][T13193] netlink: 'syz.0.2642': attribute type 21 has an invalid length. [ 444.389788][T13193] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2642'. [ 445.083441][T13205] netlink: 'syz.1.2645': attribute type 21 has an invalid length. [ 447.013570][T13220] __nla_validate_parse: 1 callbacks suppressed [ 447.013606][T13220] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2651'. [ 447.090875][T13227] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2654'. [ 447.164504][T13228] netlink: 'syz.1.2651': attribute type 21 has an invalid length. [ 447.172497][T13228] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2651'. [ 447.393536][T13231] netlink: 'syz.3.2656': attribute type 39 has an invalid length. [ 448.262573][T13244] netlink: 'syz.1.2660': attribute type 25 has an invalid length. [ 448.303003][T13244] netlink: 'syz.1.2660': attribute type 9 has an invalid length. [ 448.328079][T13244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2660'. [ 448.372003][T13255] syzkaller0: entered promiscuous mode [ 448.389563][T13255] syzkaller0: entered allmulticast mode [ 448.441562][T13248] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 448.972233][T13266] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2668'. [ 449.085505][T13268] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2669'. [ 449.138774][T13266] netlink: 'syz.1.2668': attribute type 21 has an invalid length. [ 449.184422][T13266] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2668'. [ 449.705016][T13291] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 449.730570][T13291] team0: Port device netdevsim0 added [ 449.802600][T13294] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2680'. [ 449.813738][T13291] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 449.849350][T13291] team0: Port device netdevsim0 removed [ 449.868189][T13291] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 450.115997][T13302] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2683'. [ 450.257915][T13304] netlink: 'syz.2.2683': attribute type 21 has an invalid length. [ 450.316763][T13304] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2683'. [ 450.676752][T13313] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 450.716521][T13315] netlink: 'syz.0.2688': attribute type 21 has an invalid length. [ 450.737403][T13315] netlink: 'syz.0.2688': attribute type 7 has an invalid length. [ 451.040918][T13323] netlink: 'syz.2.2692': attribute type 10 has an invalid length. [ 451.125229][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.179220][T13323] bridge_slave_1: left allmulticast mode [ 451.319117][T13323] bridge_slave_1: left promiscuous mode [ 451.326508][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.365164][T13323] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 451.376954][T13333] netlink: 'syz.0.2693': attribute type 21 has an invalid length. [ 451.450970][T13335] netlink: 'syz.3.2696': attribute type 21 has an invalid length. [ 451.690793][T13347] netlink: 'syz.0.2702': attribute type 10 has an invalid length. [ 452.276666][T13363] netlink: 'syz.0.2706': attribute type 21 has an invalid length. [ 452.313031][T13363] __nla_validate_parse: 13 callbacks suppressed [ 452.313050][T13363] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2706'. [ 452.483770][T13365] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2708'. [ 452.921134][T13394] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2716'. [ 453.006456][T13396] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2717'. [ 453.072211][T13396] hsr_slave_0: left promiscuous mode [ 453.134501][T13396] hsr_slave_1: left promiscuous mode [ 453.388226][T13398] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2718'. [ 453.401108][T13402] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2716'. [ 453.443304][T13406] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2720'. [ 453.483649][T13406] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2720'. [ 453.955823][T13424] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2727'. [ 454.049676][T13424] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.102285][T13424] bridge_slave_1: left allmulticast mode [ 454.139899][T13424] bridge_slave_1: left promiscuous mode [ 454.158232][T13424] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.290998][T13424] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 454.340198][T13435] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2731'. [ 455.464801][T13469] validate_nla: 6 callbacks suppressed [ 455.464819][T13469] netlink: 'syz.1.2744': attribute type 21 has an invalid length. [ 455.819745][T13477] netlink: 'syz.0.2746': attribute type 1 has an invalid length. [ 455.852845][T13477] netlink: 'syz.0.2746': attribute type 4 has an invalid length. [ 457.276789][T13494] netlink: 'syz.3.2748': attribute type 21 has an invalid length. [ 457.391115][T13493] __nla_validate_parse: 12 callbacks suppressed [ 457.391155][T13493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2749'. [ 457.483198][T13493] hsr_slave_0: left promiscuous mode [ 457.512072][T13493] hsr_slave_1: left promiscuous mode [ 457.732996][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 457.781280][T13498] netlink: 161164 bytes leftover after parsing attributes in process `syz.0.2750'. [ 458.096622][T13507] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2755'. [ 458.600971][T13518] syzkaller0: entered promiscuous mode [ 458.611679][T13518] syzkaller0: entered allmulticast mode [ 458.635453][T13520] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2760'. [ 458.769051][T13522] netlink: 'syz.1.2760': attribute type 21 has an invalid length. [ 458.802282][T13522] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2760'. [ 459.075845][T13525] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2761'. [ 459.086413][T13525] netlink: zone id is out of range [ 460.810227][T13533] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2764'. [ 460.819717][T13536] netlink: 'syz.3.2764': attribute type 21 has an invalid length. [ 460.842107][T13536] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2764'. [ 461.078197][T13541] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2766'. [ 461.118371][T13545] netlink: 'syz.0.2769': attribute type 21 has an invalid length. [ 461.184818][T13545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2769'. [ 461.462338][T13554] netlink: 'syz.3.2770': attribute type 21 has an invalid length. [ 461.802155][T13566] bond0: (slave bond_slave_0): Releasing backup interface [ 461.818497][T13566] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 461.872646][T13569] netlink: 'syz.2.2776': attribute type 10 has an invalid length. [ 462.074790][T13577] netlink: 'syz.2.2777': attribute type 21 has an invalid length. [ 462.719828][T13600] __nla_validate_parse: 10 callbacks suppressed [ 462.719848][T13600] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2788'. [ 462.823629][T13605] netlink: 'syz.0.2788': attribute type 21 has an invalid length. [ 462.889342][T13605] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2788'. [ 463.147894][T13615] netlink: 'syz.2.2791': attribute type 10 has an invalid length. [ 463.293850][T13615] team0: Port device dummy0 added [ 463.452645][T13626] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2799'. [ 463.473068][T13626] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2799'. [ 463.511815][T13626] tipc: Started in network mode [ 463.517636][T13626] tipc: Node identity b, cluster identity 73 [ 463.530142][T13626] tipc: Node number set to 11 [ 463.544943][T13629] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2800'. [ 463.563492][T13630] netlink: 'syz.1.2801': attribute type 21 has an invalid length. [ 463.773587][T13634] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 463.816355][T13634] netlink: 'syz.0.2804': attribute type 8 has an invalid length. [ 463.841803][T13634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2804'. [ 464.165142][T13648] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2807'. [ 464.306460][T13654] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2810'. [ 464.347424][T13653] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2809'. [ 464.438434][T13663] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2810'. [ 465.973697][T13711] validate_nla: 6 callbacks suppressed [ 465.973765][T13711] netlink: 'syz.1.2832': attribute type 25 has an invalid length. [ 465.995657][T13711] netlink: 'syz.1.2832': attribute type 9 has an invalid length. [ 466.266065][T13720] netlink: 'syz.1.2836': attribute type 10 has an invalid length. [ 466.376954][T13725] netlink: 'syz.1.2836': attribute type 9 has an invalid length. [ 466.535220][T13720] team0 (unregistering): Port device team_slave_0 removed [ 466.575295][T13720] team0 (unregistering): Port device team_slave_1 removed [ 466.657096][T13734] syzkaller0: entered promiscuous mode [ 466.664709][T13734] syzkaller0: entered allmulticast mode [ 466.677723][T13733] netlink: 'syz.3.2838': attribute type 21 has an invalid length. [ 469.264125][T13767] __nla_validate_parse: 9 callbacks suppressed [ 469.264144][T13767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2851'. [ 469.282907][T13765] netlink: 'syz.1.2850': attribute type 10 has an invalid length. [ 469.312776][T13770] netlink: 'syz.3.2852': attribute type 21 has an invalid length. [ 469.331105][T13770] netlink: 'syz.3.2852': attribute type 6 has an invalid length. [ 469.458671][T13774] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2855'. [ 469.494944][T13776] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2854'. [ 469.654532][T13779] netlink: 'syz.0.2854': attribute type 21 has an invalid length. [ 469.701103][T13779] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2854'. [ 470.080596][T13793] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.2861'. [ 470.155740][T13789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2862'. [ 470.328913][T13798] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2866'. [ 470.715000][T13809] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2868'. [ 470.816246][T13814] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2869'. [ 470.980501][T13817] netlink: 'syz.0.2869': attribute type 21 has an invalid length. [ 471.024626][T13817] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2869'. [ 471.945194][T13854] netlink: 'syz.1.2885': attribute type 21 has an invalid length. [ 475.297284][T13888] netlink: 'syz.3.2897': attribute type 2 has an invalid length. [ 475.305273][T13888] __nla_validate_parse: 7 callbacks suppressed [ 475.305283][T13888] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2897'. [ 475.321108][T13891] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2900'. [ 475.338753][T13893] netlink: 'syz.2.2900': attribute type 21 has an invalid length. [ 475.353062][T13893] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2900'. [ 475.489855][T13897] syzkaller0: entered promiscuous mode [ 475.510523][T13897] syzkaller0: entered allmulticast mode [ 475.720046][T13907] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2903'. [ 479.018944][T13935] netlink: 'syz.0.2912': attribute type 22 has an invalid length. [ 479.040373][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2912'. [ 479.164879][T13938] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2913'. [ 479.267649][T13945] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 479.739276][T13958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2921'. [ 479.754222][T13958] : renamed from caif0 [ 480.584297][T13994] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2936'. [ 481.135801][T14011] netlink: 'syz.2.2942': attribute type 10 has an invalid length. [ 481.166470][T14011] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2942'. [ 481.221411][T14013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2943'. [ 481.263037][T14011] tap0: tun_chr_ioctl cmd 1074025677 [ 481.277516][T14011] tap0: linktype set to 777 [ 481.375022][T14015] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2944'. [ 481.421284][T14015] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2944'. [ 481.483761][T14017] netlink: 'syz.1.2945': attribute type 10 has an invalid length. [ 481.564851][T14017] netlink: 'syz.1.2945': attribute type 1 has an invalid length. [ 481.599430][T14017] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2945'. [ 482.620871][T14040] netlink: 'syz.2.2952': attribute type 10 has an invalid length. [ 482.634902][T14040] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2952'. [ 482.965096][T14046] syzkaller0: entered promiscuous mode [ 482.970654][T14046] syzkaller0: entered allmulticast mode [ 483.009883][T14047] netlink: 'syz.0.2954': attribute type 2 has an invalid length. [ 483.098106][ T7235] wlan1: Trigger new scan to find an IBSS to join [ 483.237492][T14054] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2957'. [ 483.618042][T14062] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2961'. [ 485.623650][T14055] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2957'. [ 485.639077][T14078] netlink: 'syz.1.2966': attribute type 19 has an invalid length. [ 485.652905][T14079] netlink: 'syz.1.2966': attribute type 19 has an invalid length. [ 485.660963][T14054] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2957'. [ 486.144718][ T7833] wlan1: Trigger new scan to find an IBSS to join [ 486.229546][T14102] netlink: 'syz.2.2974': attribute type 25 has an invalid length. [ 486.246012][T14102] netlink: 'syz.2.2974': attribute type 9 has an invalid length. [ 486.270160][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2974'. [ 486.356436][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2978'. [ 486.386641][T14110] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2978'. [ 486.442855][T14110] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2978'. [ 486.624973][T14117] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2980'. [ 486.799353][T14117] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2980'. [ 487.081030][ T9015] wlan1: Creating new IBSS network, BSSID 9a:0a:cf:a3:86:e8 [ 489.210350][T14129] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2984'. [ 489.406393][T14145] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2990'. [ 489.439103][T14150] netlink: 'syz.0.2991': attribute type 21 has an invalid length. [ 489.462445][T14145] netlink: 'syz.3.2990': attribute type 10 has an invalid length. [ 491.338087][T14164] __nla_validate_parse: 1 callbacks suppressed [ 491.338108][T14164] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2996'. [ 492.799489][T14176] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.2999'. [ 493.917519][T14199] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3008'. [ 495.632878][T14208] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3011'. [ 495.795998][T14224] netlink: 'syz.3.3015': attribute type 21 has an invalid length. [ 495.811866][T14224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3015'. [ 496.042288][T14236] syz.3.3021 (14236) used obsolete PPPIOCDETACH ioctl [ 496.382406][T14247] netlink: 'syz.1.3025': attribute type 10 has an invalid length. [ 496.635873][T14257] syzkaller0: entered promiscuous mode [ 496.648960][T14257] syzkaller0: entered allmulticast mode [ 496.661682][T14256] C: renamed from team_slave_0 (while UP) [ 496.676036][T14256] netlink: 'syz.2.3029': attribute type 3 has an invalid length. [ 496.704416][T14256] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3029'. [ 496.747677][T14256] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 498.909114][T14276] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3034'. [ 498.919578][T14279] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3035'. [ 498.991848][T14277] syzkaller0: entered promiscuous mode [ 499.006458][T14277] syzkaller0: entered allmulticast mode [ 499.021108][T14282] netlink: 'syz.2.3035': attribute type 10 has an invalid length. [ 499.032938][T14282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3035'. [ 499.050715][T14282] dummy0: entered promiscuous mode [ 499.056392][T14282] dummy0: entered allmulticast mode [ 499.084531][T14282] team0: Port device dummy0 removed [ 499.090729][T14282] bridge0: port 2(dummy0) entered blocking state [ 499.098616][T14282] bridge0: port 2(dummy0) entered disabled state [ 499.161929][T14293] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3038'. [ 499.185381][T14293] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 499.215686][T14291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.223295][T14291] IPv6: NLM_F_CREATE should be set when creating new route [ 499.231024][T14291] IPv6: NLM_F_CREATE should be set when creating new route [ 499.238728][T14291] IPv6: NLM_F_CREATE should be set when creating new route [ 499.254794][T14294] netlink: 'syz.0.3037': attribute type 9 has an invalid length. [ 499.262810][T14294] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3037'. [ 499.328511][T14297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3039'. [ 501.182164][T14297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3039'. [ 501.228481][T14295] netlink: 'syz.0.3037': attribute type 9 has an invalid length. [ 501.242806][T14295] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3037'. [ 501.737376][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.746898][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.847314][T14324] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3049'. [ 501.964442][T14326] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3050'. [ 502.142015][T14326] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3050'. [ 502.161844][T14326] tipc: Started in network mode [ 502.182111][T14326] tipc: Node identity b, cluster identity 73 [ 502.187045][T14338] FAULT_INJECTION: forcing a failure. [ 502.187045][T14338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.202389][T14326] tipc: Node number set to 11 [ 502.203340][T14338] CPU: 1 PID: 14338 Comm: syz.2.3054 Not tainted syzkaller #0 [ 502.214636][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.224717][T14338] Call Trace: [ 502.228007][T14338] [ 502.230959][T14338] dump_stack_lvl+0x18c/0x250 [ 502.235731][T14338] ? show_regs_print_info+0x20/0x20 [ 502.241050][T14338] ? load_image+0x420/0x420 [ 502.245588][T14338] ? __might_fault+0xaa/0x120 [ 502.250275][T14338] should_fail_ex+0x394/0x4c0 [ 502.254966][T14338] copyin+0x1a/0x90 [ 502.258786][T14338] _copy_from_iter+0x532/0x1290 [ 502.263643][T14338] ? copyout_mc+0x70/0x70 [ 502.267968][T14338] ? __virt_addr_valid+0x10c/0x380 [ 502.273091][T14338] ? __virt_addr_valid+0x10c/0x380 [ 502.278292][T14338] ? __virt_addr_valid+0x10c/0x380 [ 502.283703][T14338] ? __check_object_size+0x4fc/0xa40 [ 502.288991][T14338] netlink_sendmsg+0x76b/0xbf0 [ 502.293813][T14338] ? netlink_getsockopt+0x590/0x590 [ 502.299017][T14338] ? apparmor_socket_sendmsg+0x8e/0x330 [ 502.304741][T14338] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 502.310127][T14338] ? security_socket_sendmsg+0x80/0xa0 [ 502.316053][T14338] ? netlink_getsockopt+0x590/0x590 [ 502.321266][T14338] ____sys_sendmsg+0x61b/0x980 [ 502.326098][T14338] ? __asan_memset+0x22/0x40 [ 502.330862][T14338] ? __sys_sendmsg_sock+0x30/0x30 [ 502.335878][T14338] ? __import_iovec+0x3fa/0x850 [ 502.340757][T14338] ? import_iovec+0x73/0xa0 [ 502.345631][T14338] ___sys_sendmsg+0x2a6/0x360 [ 502.350330][T14338] ? __sys_sendmsg+0x2b0/0x2b0 [ 502.355136][T14338] ? __lock_acquire+0x7d80/0x7d80 [ 502.360302][T14338] __se_sys_sendmsg+0x1d0/0x2c0 [ 502.365198][T14338] ? __x64_sys_sendmsg+0x80/0x80 [ 502.370247][T14338] ? lockdep_hardirqs_on+0x98/0x150 [ 502.375454][T14338] do_syscall_64+0x55/0xb0 [ 502.380217][T14338] ? clear_bhb_loop+0x40/0x90 [ 502.384896][T14338] ? clear_bhb_loop+0x40/0x90 [ 502.389583][T14338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.395471][T14338] RIP: 0033:0x7fac2539e0d9 [ 502.400231][T14338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.420372][T14338] RSP: 002b:00007fac2619c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.428876][T14338] RAX: ffffffffffffffda RBX: 00007fac25625fa0 RCX: 00007fac2539e0d9 [ 502.436842][T14338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 502.444896][T14338] RBP: 00007fac2619c090 R08: 0000000000000000 R09: 0000000000000000 [ 502.452868][T14338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.460834][T14338] R13: 00007fac25626038 R14: 00007fac25625fa0 R15: 00007ffd3cb1b948 [ 502.468814][T14338] [ 502.489536][T14333] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3053'. [ 502.832390][T14345] netlink: 'syz.3.3057': attribute type 10 has an invalid length. [ 502.867778][T14345] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3057'. [ 503.577559][T14375] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3067'. [ 503.850116][T14386] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.3072'. [ 504.896395][T14413] netlink: 'syz.2.3082': attribute type 25 has an invalid length. [ 504.906255][T14413] netlink: 'syz.2.3082': attribute type 9 has an invalid length. [ 504.919718][T14413] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3082'. [ 505.333306][T14429] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3086'. [ 505.429802][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.472863][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.734795][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.763126][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.058655][ T7834] bridge_slave_0: left allmulticast mode [ 506.073254][ T7834] bridge_slave_0: left promiscuous mode [ 506.086550][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.607756][ T7834] veth1_macvtap: left promiscuous mode [ 506.621760][ T7834] veth1_vlan: left promiscuous mode [ 506.637318][ T7834] veth0_vlan: left promiscuous mode [ 507.445778][ T7834] team_slave_1 (unregistering): left promiscuous mode [ 507.457296][ T7834] team_slave_1 (unregistering): left allmulticast mode [ 507.469076][ T7834] team0 (unregistering): Port device team_slave_1 removed [ 507.514742][ T7834] C (unregistering): left promiscuous mode [ 507.520764][ T7834] C (unregistering): left allmulticast mode [ 507.529895][ T7834] team0 (unregistering): Port device C removed [ 507.571912][ T7834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.665255][ T7834] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 507.942106][ T7834] bridge0 (unregistering): left promiscuous mode [ 507.949565][ T7834] bridge0 (unregistering): left allmulticast mode [ 507.957325][ T7834] team0 (unregistering): Port device bridge0 removed [ 507.991927][ T7834] bond0 (unregistering): Released all slaves [ 508.077714][T14429] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3086'. [ 508.087665][T14439] netlink: 'syz.3.3092': attribute type 1 has an invalid length. [ 508.102836][T14442] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3093'. [ 508.290349][T14445] syzkaller0: entered promiscuous mode [ 508.296858][T14445] syzkaller0: entered allmulticast mode [ 510.906824][T14470] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3101'. [ 510.916128][T14472] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3102'. [ 510.951328][T14484] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.3106'. [ 511.228499][T14495] FAULT_INJECTION: forcing a failure. [ 511.228499][T14495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.251360][T14495] CPU: 1 PID: 14495 Comm: syz.1.3110 Not tainted syzkaller #0 [ 511.258895][T14495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 511.269163][T14495] Call Trace: [ 511.272463][T14495] [ 511.275415][T14495] dump_stack_lvl+0x18c/0x250 [ 511.280127][T14495] ? show_regs_print_info+0x20/0x20 [ 511.285358][T14495] ? load_image+0x420/0x420 [ 511.289905][T14495] ? __might_fault+0xaa/0x120 [ 511.294617][T14495] ? __lock_acquire+0x7d80/0x7d80 [ 511.299675][T14495] ? __virt_addr_valid+0x10c/0x380 [ 511.304817][T14495] should_fail_ex+0x394/0x4c0 [ 511.309533][T14495] _copy_from_user+0x2f/0xe0 [ 511.314152][T14495] sctp_setsockopt+0x19e/0x11e0 [ 511.319178][T14495] ? sock_common_recvmsg+0x190/0x190 [ 511.324488][T14495] do_sock_setsockopt+0x175/0x1a0 [ 511.329550][T14495] ? __fdget+0x180/0x210 [ 511.333825][T14495] __x64_sys_setsockopt+0x182/0x200 [ 511.339065][T14495] do_syscall_64+0x55/0xb0 [ 511.343773][T14495] ? clear_bhb_loop+0x40/0x90 [ 511.348476][T14495] ? clear_bhb_loop+0x40/0x90 [ 511.353182][T14495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.359101][T14495] RIP: 0033:0x7fbab739e0d9 [ 511.363538][T14495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.383188][T14495] RSP: 002b:00007fbab834c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 511.391986][T14495] RAX: ffffffffffffffda RBX: 00007fbab7625fa0 RCX: 00007fbab739e0d9 [ 511.399997][T14495] RDX: 0000000000000002 RSI: 0000000000000084 RDI: 0000000000000003 [ 511.408000][T14495] RBP: 00007fbab834c090 R08: 0000000000000008 R09: 0000000000000000 [ 511.416017][T14495] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.424017][T14495] R13: 00007fbab7626038 R14: 00007fbab7625fa0 R15: 00007ffc4d218838 [ 511.432060][T14495] [ 511.707091][T14503] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3113'. [ 511.884838][T14505] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3114'. [ 511.895827][T14505] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 512.528076][T14515] netlink: 'syz.2.3116': attribute type 3 has an invalid length. [ 512.572335][T14515] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 512.603051][T14515] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.3116'. [ 513.177057][T14513] netlink: 'syz.2.3116': attribute type 10 has an invalid length. [ 513.201710][T14507] netlink: 'syz.0.3115': attribute type 10 has an invalid length. [ 513.210542][T14507] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3115'. [ 513.223985][T14511] netlink: 'syz.3.3117': attribute type 10 has an invalid length. [ 513.237126][T14511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3117'. [ 513.254339][T14511] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 513.272972][T14511] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.309360][T14511] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 513.330610][T14519] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3118'. [ 513.536461][T14544] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.3124'. [ 513.682422][T14546] syzkaller0: entered promiscuous mode [ 513.768663][T14546] syzkaller0: entered allmulticast mode [ 514.337671][T14565] netlink: 'syz.0.3128': attribute type 3 has an invalid length. [ 514.378993][T14565] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 514.425485][T14565] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.3128'. [ 516.215494][T14564] netlink: 'syz.0.3128': attribute type 10 has an invalid length. [ 516.237596][T14561] netlink: 'syz.1.3129': attribute type 10 has an invalid length. [ 516.252750][T14561] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3129'. [ 516.440689][T14566] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 516.464335][T14566] syzkaller0: entered promiscuous mode [ 516.470054][T14566] syzkaller0: entered allmulticast mode [ 517.156683][ T9015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 517.628410][T14597] netlink: 'syz.1.3138': attribute type 49 has an invalid length. [ 518.952129][T14574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3131'. [ 518.962165][T14576] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3132'. [ 518.980493][T14597] netlink: 'syz.1.3138': attribute type 49 has an invalid length. [ 519.122151][T14604] netlink: 'syz.3.3139': attribute type 10 has an invalid length. [ 519.173328][T14595] Bluetooth: hci2: command 0x0406 tx timeout [ 519.464611][T14604] netlink: 'syz.3.3139': attribute type 3 has an invalid length. [ 519.485983][T14604] netlink: 'syz.3.3139': attribute type 1 has an invalid length. [ 519.543124][T14604] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.3139'. [ 519.671949][T14616] netlink: 'syz.2.3144': attribute type 10 has an invalid length. [ 519.682872][T14616] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3144'. [ 520.252461][T14635] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3153'. [ 520.281697][T14635] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3153'. [ 520.743566][T14647] netlink: 'syz.3.3156': attribute type 25 has an invalid length. [ 520.752569][T14647] netlink: 'syz.3.3156': attribute type 9 has an invalid length. [ 520.768430][T14647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3156'. [ 520.864389][T14652] netlink: 'syz.1.3158': attribute type 10 has an invalid length. [ 521.220946][T14652] netlink: 'syz.1.3158': attribute type 3 has an invalid length. [ 521.231500][T14658] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.241991][T14652] netlink: 'syz.1.3158': attribute type 1 has an invalid length. [ 521.269977][T14652] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.3158'. [ 521.954967][T14692] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3172'. [ 521.969620][T14692] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3172'. [ 524.070075][T14711] validate_nla: 2 callbacks suppressed [ 524.070092][T14711] netlink: 'syz.2.3179': attribute type 10 has an invalid length. [ 524.122021][T14711] bond0: (slave netdevsim0): Releasing backup interface [ 524.146821][T14711] team0: Port device netdevsim0 added [ 524.163072][T14712] netlink: 'syz.2.3179': attribute type 10 has an invalid length. [ 524.208645][T14712] team0: Port device netdevsim0 removed [ 524.225761][T14712] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 524.510902][T14733] netlink: 'syz.0.3187': attribute type 10 has an invalid length. [ 524.537234][T14714] ================================================================== [ 524.545348][T14714] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 524.553202][T14714] Write of size 72 at addr ffff888031aa9a88 by task syz.3.3180/14714 [ 524.561282][T14714] [ 524.563618][T14714] CPU: 1 PID: 14714 Comm: syz.3.3180 Not tainted syzkaller #0 [ 524.571352][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.581421][T14714] Call Trace: [ 524.584697][T14714] [ 524.587624][T14714] dump_stack_lvl+0x18c/0x250 [ 524.592302][T14714] ? read_lock_is_recursive+0x20/0x20 [ 524.597711][T14714] ? show_regs_print_info+0x20/0x20 [ 524.602916][T14714] ? load_image+0x420/0x420 [ 524.607423][T14714] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 524.612957][T14714] ? __virt_addr_valid+0x10c/0x380 [ 524.618066][T14714] ? __virt_addr_valid+0x10c/0x380 [ 524.623185][T14714] ? __virt_addr_valid+0x10c/0x380 [ 524.628323][T14714] print_report+0xa8/0x210 [ 524.632772][T14714] ? __bpf_get_stackid+0x6c7/0x900 [ 524.637924][T14714] kasan_report+0x117/0x150 [ 524.642517][T14714] ? __bpf_get_stackid+0x6c7/0x900 [ 524.647630][T14714] kasan_check_range+0x241/0x290 [ 524.652831][T14714] ? __bpf_get_stackid+0x6c7/0x900 [ 524.657958][T14714] __asan_memcpy+0x40/0x70 [ 524.662373][T14714] __bpf_get_stackid+0x6c7/0x900 [ 524.667310][T14714] bpf_get_stackid_pe+0x343/0x410 [ 524.672445][T14714] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 524.677892][T14714] bpf_overflow_handler+0x1fc/0x510 [ 524.683438][T14714] ? bpf_overflow_handler+0xde/0x510 [ 524.688811][T14714] ? tp_perf_event_destroy+0x20/0x20 [ 524.694097][T14714] ? perf_trace_preemptirq_template+0xac/0x330 [ 524.700303][T14714] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 524.707544][T14714] ? __perf_event_account_interrupt+0x187/0x280 [ 524.713897][T14714] __perf_event_overflow+0x461/0x660 [ 524.719186][T14714] perf_swevent_event+0x319/0x570 [ 524.724210][T14714] ? perf_tp_event+0x1550/0x1550 [ 524.729168][T14714] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 524.736391][T14714] ___perf_sw_event+0x4ab/0x730 [ 524.741276][T14714] ? ___perf_sw_event+0x19e/0x730 [ 524.746304][T14714] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 524.752725][T14714] ? __lock_acquire+0x1336/0x7d80 [ 524.757799][T14714] ? rep_movs_alternative+0x4a/0x90 [ 524.763020][T14714] ? lockdep_hardirqs_on+0x98/0x150 [ 524.768680][T14714] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 524.774848][T14714] __perf_sw_event+0x139/0x270 [ 524.779612][T14714] do_user_addr_fault+0x1242/0x12d0 [ 524.784834][T14714] ? rcu_is_watching+0x15/0xb0 [ 524.790121][T14714] exc_page_fault+0x64/0x100 [ 524.794801][T14714] asm_exc_page_fault+0x26/0x30 [ 524.799650][T14714] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 524.805461][T14714] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 524.825088][T14714] RSP: 0018:ffffc90012e17bd0 EFLAGS: 00050206 [ 524.831339][T14714] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 0000000000000028 [ 524.839322][T14714] RDX: 0000000000000001 RSI: 00002000000c8000 RDI: ffff88806a04e545 [ 524.847741][T14714] RBP: ffffc90012e17d20 R08: 0000000000000004 R09: 0000000000000005 [ 524.855818][T14714] R10: dffffc0000000000 R11: ffffed100d409cad R12: 00002000000c8028 [ 524.864325][T14714] R13: 1ffff920025c2fbd R14: ffff88806a04e000 R15: 00002000000c7abb [ 524.872412][T14714] ? rcuref_put_slowpath+0x101/0x150 [ 524.877721][T14714] _copy_from_user+0x8b/0xe0 [ 524.882411][T14714] generic_map_update_batch+0x58c/0x800 [ 524.888337][T14714] ? rcu_read_unlock+0xa0/0xa0 [ 524.893117][T14714] ? __fdget+0x180/0x210 [ 524.897367][T14714] ? rcu_read_unlock+0xa0/0xa0 [ 524.902149][T14714] bpf_map_do_batch+0x3f2/0x600 [ 524.907103][T14714] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 524.913651][T14714] __sys_bpf+0x381/0x890 [ 524.917947][T14714] ? read_tsc+0x9/0x20 [ 524.922021][T14714] ? bpf_link_show_fdinfo+0x390/0x390 [ 524.927399][T14714] ? lock_chain_count+0x20/0x20 [ 524.932250][T14714] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 524.938234][T14714] __x64_sys_bpf+0x7c/0x90 [ 524.942652][T14714] do_syscall_64+0x55/0xb0 [ 524.947063][T14714] ? clear_bhb_loop+0x40/0x90 [ 524.951758][T14714] ? clear_bhb_loop+0x40/0x90 [ 524.956434][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 524.962411][T14714] RIP: 0033:0x7f6ac2b9e0d9 [ 524.966828][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.986517][T14714] RSP: 002b:00007f6ac3ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.994968][T14714] RAX: ffffffffffffffda RBX: 00007f6ac2e25fa0 RCX: 00007f6ac2b9e0d9 [ 525.002963][T14714] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 525.010943][T14714] RBP: 00007f6ac2c35024 R08: 0000000000000000 R09: 0000000000000000 [ 525.018907][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.026872][T14714] R13: 00007f6ac2e26038 R14: 00007f6ac2e25fa0 R15: 00007ffdda99c648 [ 525.034868][T14714] [ 525.037880][T14714] [ 525.040203][T14714] Allocated by task 14714: [ 525.044599][T14714] kasan_set_track+0x4e/0x70 [ 525.049186][T14714] __kasan_kmalloc+0x8f/0xa0 [ 525.053782][T14714] __kmalloc_node+0xb6/0x240 [ 525.058383][T14714] bpf_map_area_alloc+0x5e/0x110 [ 525.063327][T14714] prealloc_elems_and_freelist+0x86/0x1c0 [ 525.069067][T14714] stack_map_alloc+0x32b/0x4b0 [ 525.073842][T14714] map_create+0x877/0x12f0 [ 525.078346][T14714] __sys_bpf+0x651/0x890 [ 525.082586][T14714] __x64_sys_bpf+0x7c/0x90 [ 525.087081][T14714] do_syscall_64+0x55/0xb0 [ 525.091512][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.097400][T14714] [ 525.099715][T14714] Last potentially related work creation: [ 525.105528][T14714] kasan_save_stack+0x3e/0x60 [ 525.110201][T14714] __kasan_record_aux_stack+0xaf/0xc0 [ 525.115594][T14714] kvfree_call_rcu+0xee/0x780 [ 525.120270][T14714] bpf_local_storage_map_free+0x26a/0x5a0 [ 525.126066][T14714] bpf_map_free_deferred+0x103/0x3a0 [ 525.131343][T14714] process_scheduled_works+0xa60/0x1600 [ 525.136884][T14714] worker_thread+0xa5e/0xfe0 [ 525.141474][T14714] kthread+0x2fa/0x390 [ 525.145539][T14714] ret_from_fork+0x48/0x80 [ 525.149951][T14714] ret_from_fork_asm+0x11/0x20 [ 525.154752][T14714] [ 525.157079][T14714] Second to last potentially related work creation: [ 525.163764][T14714] kasan_save_stack+0x3e/0x60 [ 525.168461][T14714] __kasan_record_aux_stack+0xaf/0xc0 [ 525.173851][T14714] kvfree_call_rcu+0xee/0x780 [ 525.178548][T14714] fib_rules_unregister+0x290/0x330 [ 525.184026][T14714] fib6_rules_net_exit_batch+0x64/0xc0 [ 525.189843][T14714] setup_net+0x85a/0xa20 [ 525.194122][T14714] copy_net_ns+0x35e/0x5d0 [ 525.198721][T14714] create_new_namespaces+0x3ce/0x700 [ 525.204012][T14714] copy_namespaces+0x42a/0x4a0 [ 525.208860][T14714] copy_process+0x16f6/0x3da0 [ 525.213529][T14714] kernel_clone+0x24b/0x8a0 [ 525.218021][T14714] __x64_sys_clone+0x1b7/0x230 [ 525.222774][T14714] do_syscall_64+0x55/0xb0 [ 525.227184][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.233074][T14714] [ 525.235387][T14714] The buggy address belongs to the object at ffff888031aa9a00 [ 525.235387][T14714] which belongs to the cache kmalloc-cg-256 of size 256 [ 525.249719][T14714] The buggy address is located 136 bytes inside of [ 525.249719][T14714] allocated 200-byte region [ffff888031aa9a00, ffff888031aa9ac8) [ 525.263957][T14714] [ 525.266464][T14714] The buggy address belongs to the physical page: [ 525.273525][T14714] page:ffffea0000c6aa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31aa8 [ 525.284459][T14714] head:ffffea0000c6aa00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 525.293401][T14714] memcg:ffff88802f7e0801 [ 525.297974][T14714] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 525.306380][T14714] page_type: 0xffffffff() [ 525.310887][T14714] raw: 00fff00000000840 ffff888017c4f000 0000000000000000 dead000000000001 [ 525.319659][T14714] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88802f7e0801 [ 525.328317][T14714] page dumped because: kasan: bad access detected [ 525.335267][T14714] page_owner tracks the page as allocated [ 525.341081][T14714] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9434, tgid 9430 (syz.3.1310), ts 262768808852, free_ts 261265707557 [ 525.364547][T14714] post_alloc_hook+0x1c1/0x200 [ 525.369319][T14714] get_page_from_freelist+0x2181/0x22a0 [ 525.374860][T14714] __alloc_pages+0x1f0/0x460 [ 525.379440][T14714] alloc_slab_page+0x5d/0x180 [ 525.384125][T14714] new_slab+0x87/0x2d0 [ 525.389243][T14714] ___slab_alloc+0xc5c/0x12f0 [ 525.394359][T14714] __kmem_cache_alloc_node+0x11f/0x250 [ 525.399833][T14714] kmalloc_trace+0x2a/0xe0 [ 525.404332][T14714] prog_array_map_alloc+0x51/0x200 [ 525.409612][T14714] map_create+0x877/0x12f0 [ 525.414028][T14714] __sys_bpf+0x651/0x890 [ 525.418275][T14714] __x64_sys_bpf+0x7c/0x90 [ 525.422685][T14714] do_syscall_64+0x55/0xb0 [ 525.427210][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.433101][T14714] page last free stack trace: [ 525.437848][T14714] free_unref_page_prepare+0x7d7/0x8f0 [ 525.443304][T14714] free_unref_page+0x32/0x2e0 [ 525.447976][T14714] __slab_free+0x35a/0x400 [ 525.452407][T14714] qlist_free_all+0x75/0xd0 [ 525.457022][T14714] kasan_quarantine_reduce+0x143/0x160 [ 525.462500][T14714] __kasan_slab_alloc+0x22/0x80 [ 525.467363][T14714] slab_post_alloc_hook+0x6a/0x4d0 [ 525.472672][T14714] kmem_cache_alloc_lru+0x175/0x2b0 [ 525.477895][T14714] sock_alloc_inode+0x28/0xc0 [ 525.482774][T14714] new_inode_pseudo+0x63/0x1d0 [ 525.487581][T14714] __sock_create+0x12d/0x940 [ 525.492177][T14714] __sys_socket+0xd7/0x1b0 [ 525.496592][T14714] __x64_sys_socket+0x7a/0x90 [ 525.501264][T14714] do_syscall_64+0x55/0xb0 [ 525.505678][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.511578][T14714] [ 525.513892][T14714] Memory state around the buggy address: [ 525.519513][T14714] ffff888031aa9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 525.527672][T14714] ffff888031aa9a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 525.535728][T14714] >ffff888031aa9a80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 525.544215][T14714] ^ [ 525.550623][T14714] ffff888031aa9b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 525.558853][T14714] ffff888031aa9b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 525.566993][T14714] ================================================================== [ 525.575141][T14714] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 525.582349][T14714] CPU: 1 PID: 14714 Comm: syz.3.3180 Not tainted syzkaller #0 [ 525.589799][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.599867][T14714] Call Trace: [ 525.603223][T14714] [ 525.606233][T14714] dump_stack_lvl+0x18c/0x250 [ 525.610918][T14714] ? show_regs_print_info+0x20/0x20 [ 525.616112][T14714] ? load_image+0x420/0x420 [ 525.620618][T14714] panic+0x2ca/0x720 [ 525.624511][T14714] ? __lock_acquire+0x7d80/0x7d80 [ 525.629530][T14714] ? bpf_jit_dump+0xd0/0xd0 [ 525.635077][T14714] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 525.640975][T14714] ? _raw_spin_unlock+0x40/0x40 [ 525.645847][T14714] ? __bpf_get_stackid+0x6c7/0x900 [ 525.650964][T14714] check_panic_on_warn+0x84/0xa0 [ 525.656266][T14714] ? __bpf_get_stackid+0x6c7/0x900 [ 525.661476][T14714] end_report+0x6f/0x130 [ 525.665822][T14714] kasan_report+0x128/0x150 [ 525.670532][T14714] ? __bpf_get_stackid+0x6c7/0x900 [ 525.675672][T14714] kasan_check_range+0x241/0x290 [ 525.680733][T14714] ? __bpf_get_stackid+0x6c7/0x900 [ 525.685904][T14714] __asan_memcpy+0x40/0x70 [ 525.690448][T14714] __bpf_get_stackid+0x6c7/0x900 [ 525.695912][T14714] bpf_get_stackid_pe+0x343/0x410 [ 525.701127][T14714] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 525.706667][T14714] bpf_overflow_handler+0x1fc/0x510 [ 525.712137][T14714] ? bpf_overflow_handler+0xde/0x510 [ 525.717421][T14714] ? tp_perf_event_destroy+0x20/0x20 [ 525.722709][T14714] ? perf_trace_preemptirq_template+0xac/0x330 [ 525.728924][T14714] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 525.736147][T14714] ? __perf_event_account_interrupt+0x187/0x280 [ 525.742595][T14714] __perf_event_overflow+0x461/0x660 [ 525.748079][T14714] perf_swevent_event+0x319/0x570 [ 525.753125][T14714] ? perf_tp_event+0x1550/0x1550 [ 525.758366][T14714] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 525.765848][T14714] ___perf_sw_event+0x4ab/0x730 [ 525.770743][T14714] ? ___perf_sw_event+0x19e/0x730 [ 525.775778][T14714] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 525.782215][T14714] ? __lock_acquire+0x1336/0x7d80 [ 525.787255][T14714] ? rep_movs_alternative+0x4a/0x90 [ 525.792557][T14714] ? lockdep_hardirqs_on+0x98/0x150 [ 525.797776][T14714] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 525.804035][T14714] __perf_sw_event+0x139/0x270 [ 525.808997][T14714] do_user_addr_fault+0x1242/0x12d0 [ 525.814198][T14714] ? rcu_is_watching+0x15/0xb0 [ 525.818997][T14714] exc_page_fault+0x64/0x100 [ 525.823674][T14714] asm_exc_page_fault+0x26/0x30 [ 525.828694][T14714] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 525.835064][T14714] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 525.854677][T14714] RSP: 0018:ffffc90012e17bd0 EFLAGS: 00050206 [ 525.860743][T14714] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 0000000000000028 [ 525.868709][T14714] RDX: 0000000000000001 RSI: 00002000000c8000 RDI: ffff88806a04e545 [ 525.876675][T14714] RBP: ffffc90012e17d20 R08: 0000000000000004 R09: 0000000000000005 [ 525.884919][T14714] R10: dffffc0000000000 R11: ffffed100d409cad R12: 00002000000c8028 [ 525.893101][T14714] R13: 1ffff920025c2fbd R14: ffff88806a04e000 R15: 00002000000c7abb [ 525.903664][T14714] ? rcuref_put_slowpath+0x101/0x150 [ 525.908991][T14714] _copy_from_user+0x8b/0xe0 [ 525.913712][T14714] generic_map_update_batch+0x58c/0x800 [ 525.919487][T14714] ? rcu_read_unlock+0xa0/0xa0 [ 525.924684][T14714] ? __fdget+0x180/0x210 [ 525.928927][T14714] ? rcu_read_unlock+0xa0/0xa0 [ 525.933685][T14714] bpf_map_do_batch+0x3f2/0x600 [ 525.938622][T14714] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 525.945208][T14714] __sys_bpf+0x381/0x890 [ 525.949460][T14714] ? read_tsc+0x9/0x20 [ 525.953626][T14714] ? bpf_link_show_fdinfo+0x390/0x390 [ 525.959465][T14714] ? lock_chain_count+0x20/0x20 [ 525.964422][T14714] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 525.970517][T14714] __x64_sys_bpf+0x7c/0x90 [ 525.974948][T14714] do_syscall_64+0x55/0xb0 [ 525.979384][T14714] ? clear_bhb_loop+0x40/0x90 [ 525.984078][T14714] ? clear_bhb_loop+0x40/0x90 [ 525.989010][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 525.994907][T14714] RIP: 0033:0x7f6ac2b9e0d9 [ 525.999497][T14714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.019793][T14714] RSP: 002b:00007f6ac3ad9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.028463][T14714] RAX: ffffffffffffffda RBX: 00007f6ac2e25fa0 RCX: 00007f6ac2b9e0d9 [ 526.036605][T14714] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 526.044570][T14714] RBP: 00007f6ac2c35024 R08: 0000000000000000 R09: 0000000000000000 [ 526.052797][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.061040][T14714] R13: 00007f6ac2e26038 R14: 00007f6ac2e25fa0 R15: 00007ffdda99c648 [ 526.069036][T14714] [ 526.072416][T14714] Kernel Offset: disabled [ 526.076739][T14714] Rebooting in 86400 seconds..