last executing test programs: 14.919909641s ago: executing program 2 (id=2322): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x80}, 0x30040801) (async) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x80}, 0x30040801) 14.11398796s ago: executing program 2 (id=2324): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00009263"], 0x0, 0x42, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fe}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x16, &(0x7f0000002840)=ANY=[@ANYBLOB="61124c00000000006113990000000000bf2000001700000007000000080000002d030b000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee66bc156016b290000bf0500000000000073350000000000006507000002000000070700004a0000000f75000000000000bf540000000000000704000004", @ANYBLOB="a436b121ba5054b347f90e0e1a561dd5210f413b0321853dbaa1207233db41db7fc1b678138b6b1125e763a2f0da13d47a0dc128c102aa4942fa5cc400dc4dc7bd184eab85d5f099cfef344e22162d5ec272b0a1a3d50fdb8b"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000004c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='0,0'], 0x79) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000017850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000087aaefa6d2f30044862c44a8c100b8312f12c2831375505117ea9dba68f5a1dd497260a98e265039fb0351e77c0f067bc3c276bfb3", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="04000000000000000200"/28], 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0xb9, 0x0, r7, 0xfffffe00, '\x00', 0x0, r4, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r7, 0x58, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002240)={r4, 0x20, &(0x7f0000002200)={&(0x7f0000001140)=""/129, 0x81, 0x0, &(0x7f0000001200)=""/4096, 0x1000}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x11, 0x14, &(0x7f0000002340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f00000023c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002400)={r13}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002940)={0x3, 0x14, &(0x7f0000000700)=@raw=[@call={0x85, 0x0, 0x0, 0x84}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @exit, @ldst={0x1, 0x3, 0x1, 0xb, 0x6, 0x2, 0x10}, @generic={0x43, 0xf, 0x1, 0xff, 0x2}, @ldst={0x2, 0x0, 0x2, 0x1, 0x4, 0x80}], &(0x7f0000002800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000024c0)={{r4, 0xffffffffffffffff}, &(0x7f0000002440), &(0x7f0000002480)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x1b, 0x2b, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000005000000000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000b7030000000000008500000083000000bf0900000000000055090100080000009500000000000000b7080000000000007b8af8ff00000000b708000001f8ffff7b8af00d00000000000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70202000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000802600020600000057093000000000002b810c00f0ffffff8520000003000000e575e0fff0ffffff285bf0ff0400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000f00)='GPL\x00', 0x3, 0xa3, &(0x7f0000000f40)=""/163, 0x41000, 0x2, '\x00', r11, @fallback=0x20, r4, 0x8, &(0x7f00000010c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x5, 0x9, 0x8, 0x9}, 0x10, r12, r13, 0x4, &(0x7f0000002500)=[r14, r4], &(0x7f0000002540)=[{0x0, 0x4, 0x9, 0x3}, {0x5, 0x1, 0xd, 0x4}, {0x3, 0x3, 0x9, 0xc}, {0x0, 0x3, 0x8, 0x9}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r4, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x0, &(0x7f00000001c0), &(0x7f0000000200)='syzkaller\x00', 0x6, 0x79, &(0x7f0000000900)=""/121, 0x1f00, 0x0, '\x00', r15, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xa, 0x3, 0x2}, 0x10, 0x189e7, r4, 0x2, &(0x7f0000000b40)=[r16], &(0x7f0000000b80)=[{0x4, 0x5, 0xd, 0x1}, {0x1, 0x4, 0xa, 0x7}], 0x10, 0xffffffc0}, 0x94) 14.040170033s ago: executing program 3 (id=2326): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r0}) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000019008111e01212ba0d8105040a603f00ff0f040b067c55a1bc0009000800069903000000b0000700fe8081780d000500030001400200040000d6ff6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccefddb6730cca262f3d40fad95667e04adcdf634c1f210008bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/221, 0xdd}], 0x1, 0x0, 0x57}, 0x40000) (rerun: 32) 13.784723059s ago: executing program 3 (id=2327): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9bf, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x1, 0x7, 0xa, 0x2, 0x20, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x5, 0xb, 0x3, 0x1, 0xfffffffffffffffc}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x1, 0x7, 0x602b, 0x200}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{0x5, 0x1, 0x4, 0xb}], 0x10, 0xfffffffb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r0, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0], 0x0, 0x74, &(0x7f0000000b40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12a, 0x12a, 0x6, [@datasec={0x3, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x7, 0x7}, {0x1, 0x5, 0x2}, {0x2, 0x10000, 0x5}, {0x1, 0x101, 0x3}, {0x5, 0x6, 0x9}], "ab9218"}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @datasec={0xf, 0x8, 0x0, 0xf, 0x3, [{0x5, 0x800, 0x36}, {0x4, 0x5, 0x36}, {0x5, 0x1, 0x33f3}, {0x1, 0x401, 0x4}, {0x2, 0x6, 0x9}, {0x3, 0x8, 0xa}, {0x3, 0x7ff, 0x80000001}, {0x2, 0x0, 0x550}], "7de2ac"}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {0x5, 0x2}, {0x8, 0x2}, {0xa, 0x1}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @int={0xd, 0x0, 0x0, 0x1, 0x12, 0x1e, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x61, 0x0, 0x61]}}, &(0x7f0000000f00)=""/110, 0x14a, 0x6e, 0x0, 0x6, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_ext={0x1c, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x74e}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f0000000980)='GPL\x00', 0x4, 0xb4, &(0x7f00000009c0)=""/180, 0x0, 0x0, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000fc0)={0x3, 0xd, 0x97f4, 0x8}, 0x10, 0x2ad6, 0xffffffffffffffff, 0x1, &(0x7f0000001000)=[r2, r3, r3, r2], &(0x7f0000001040)=[{0x4, 0x4, 0x10, 0x1}], 0x10, 0x9b62}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x401, 0x0, r2, 0x5, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r7}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 13.394422348s ago: executing program 3 (id=2328): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) perf_event_open(0x0, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000300)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000440)={&(0x7f0000000480)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) close(r2) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x3a, 0x10, &(0x7f0000000c80), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000001000)="63bd998e46dc3f94f5c0cf2ddf33", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.527749909s ago: executing program 1 (id=2331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, 0x0, 0x8001) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe50200000000000000f9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000000000001000000000000000000000014000100000000000000000002000000000000000000000014000000000000000000000002000000000000000000000011000000000000000000000001000000000000000000000011000000000000000200000001000000000000000000e94ae0f1eff3fd7a00000000000007000000830300000396000f206a77bdd1a004129054e7704a000000"], 0xa0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000e76c3c0bd5ec80fffe070000800000000800001f01ed16007d999dcb728b09b900b71b61c18d7950631e999811f91afcd1a9df8a86dfc09703548b6aa216f0df74907a270023004ace1530aa24b1a7055e5623a57ba6b454c9e9a7d99f2d866679", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000100)}, 0x10) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (rerun: 32) socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64) socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64) r7 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000006c0)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40401}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.335998983s ago: executing program 2 (id=2333): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x5, 0x3, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}, {0x1, 0x1, 0x10, 0x7}]}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0xffffff0a, &(0x7f00000006c0)=[{&(0x7f0000000700)="c018030029000b12d25a80648c2594f90124fc60100c02000c0c0400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdbc, &(0x7f00000000c0)=[{&(0x7f0000000140)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) socketpair(0x2a, 0x2, 0x5, &(0x7f00000001c0)) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', r4, 0x4000, r0}, 0x18) 12.335623743s ago: executing program 3 (id=2334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000000), 0x33eb) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xb, &(0x7f00000003c0)=@raw=[@generic={0xdb, 0x8, 0xc, 0x2618, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x64, &(0x7f0000000480)=""/100, 0x41000, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x3, 0xa, 0xfff, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[{0x4, 0x4, 0x3, 0xc}], 0x10, 0xb}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000004000000040000000f"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r5}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000640)={r2, r3}) (async) r6 = socket$kcm(0xa, 0x1, 0x0) (async) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdb}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040)=r8, 0x4) setsockopt$sock_attach_bpf(r6, 0x29, 0x37, 0x0, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) 11.967800803s ago: executing program 3 (id=2335): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000080), 0x4bd) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000200), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11.726857428s ago: executing program 3 (id=2336): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000700000000000000ffffffff0000000000000000"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000400), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f00000004c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x5, 0x2, 0x0, 0x81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0x8f}, 0x449, 0xf, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80040, 0x0) r3 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40", 0x9c}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r4, &(0x7f0000000ac0)={&(0x7f0000000b00)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000b80)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x308}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000f80)={&(0x7f0000000fc0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x3, 0x8, 0x0, &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r2, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=r6, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f980e91476d27b", @ANYRES8=r1], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5935, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000010000001811000052d897154cd2a6e582b83ede9f48c12bd2df951e5bdc19b36552570f1902dc", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a00fe00000000b509000004000000c39a04fea1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r3, 0x12) 10.951372637s ago: executing program 1 (id=2337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000070000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f7ffffff0000000000000000000000000040f2e93a8a8bfb8f96e9f1d1a24d3d222ee2d27124125df7303b56a802ab250e159b18b543167b007f52"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000400), 0x0}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="2000000020008107090f9becdb4cb96b02000000000000020000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f00000000c0)=r6) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702b1ffe80000000000000", @ANYRESDEC], 0xffdd) 10.756784481s ago: executing program 0 (id=2338): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x88) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000300), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000340), 0x43) recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x4000001) write$cgroup_subtree(r3, &(0x7f0000001500)=ANY=[], 0x101d0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000001580)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000016c0)=""/102, 0x66}], 0x1}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001900)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r6, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r5, &(0x7f0000001980)=r6, 0x12) sendmsg$kcm(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="d8000000240081064e81f782db44b9040a0208000300000001000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a50053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) 9.804323844s ago: executing program 2 (id=2339): r0 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="c6", 0xfffffdd1}], 0x1}, 0x4040004) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x8051) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611076000000000004698d00000000009500000000000000"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x22, 0x80001, 0xfffffffe, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r5, r4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x4, &(0x7f0000000000), 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020207500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000640)='GPL\x00', 0x4, 0x29, &(0x7f0000000680)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.2784384s ago: executing program 0 (id=2340): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f00000020c0)="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", 0x6a4}, {&(0x7f00000015c0)="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", 0x3a6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}], 0x20}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xf97, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000ac0)={r0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/191, 0xbf, 0x0, &(0x7f0000000440)=""/160, 0xa0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000580)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f00000005c0)='GPL\x00', 0x401, 0x28, &(0x7f0000000600)=""/40, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0xf, 0x9e, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000006c0)=[{0x4, 0x2, 0x8, 0x2}, {0x0, 0x4, 0x5, 0x7}, {0x2, 0x4, 0x1, 0x1}, {0x1, 0x4, 0xa, 0xc}, {0x2, 0x5, 0x8, 0x2}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000008c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x4, 0xf, &(0x7f0000002780)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe14, 0x10, 0x0, 0x42}, 0x21) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003780)=@bloom_filter={0x1e, 0x1, 0x4f, 0x3, 0x60048, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xf, 0x4, 0xf}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003800)=@base={0xf, 0x8001, 0x0, 0x6, 0x20, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000003880), &(0x7f00000038c0)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003940)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x9d9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x5, 0x15, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x0, 0x7, 0x6, 0xb, 0x30}]}, &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0xd7, &(0x7f0000000240)=""/215, 0x41000, 0xa0, '\x00', 0x0, @fallback=0xf, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x2, &(0x7f00000039c0)=[r5, r6, r7, 0x1, r8, r9, r10], &(0x7f0000003a00)=[{0x3, 0x2, 0xb, 0x7}, {0x5, 0x4, 0x0, 0x4}], 0x10, 0x9}, 0x94) 1.151929443s ago: executing program 1 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000000000000020000000400000005"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_int(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113100000000000bfa000000000000007000000ee00160e5e03feff00000000140500000000000069163a0000000000bf07000000000000360507000fff0720670600003f000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0xc, r0}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0xc, r0}, 0x18) 1.128700183s ago: executing program 0 (id=2342): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x101239, 0xc8, 0x0, 0x0, 0x0, 0x6, 0xffc0}, 0x0, 0x4, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81"], 0xfdef) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0xffffffffffffff80}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) 1.045939615s ago: executing program 1 (id=2343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='cpu<=0||!') bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x200, 0x0) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000001900)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001980)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000001640)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x80, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 931.921078ms ago: executing program 2 (id=2344): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f00000002c0)=r2, 0x11) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000340)=r2, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x810b, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000007f781850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x111451, 0xac, 0x0, 0x6, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair(0x2b, 0x4, 0x0, &(0x7f0000000000)) 848.14266ms ago: executing program 0 (id=2345): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xbffffff, 0x3101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x904, 0x0, 0x0, 0x7, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000940)=r6, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeaff}, 0x48010) (async) sendmsg$sock(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x21, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) 801.445071ms ago: executing program 1 (id=2346): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x5, 0x0, 0x3, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xffff, 0x7fff}, 0x11efa, 0x4, 0x9b, 0x4, 0x1d, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffe0e, &(0x7f0000000280)=[{&(0x7f0000000380)="d80000001a00810a1d08007b490d4d1e81f8d829124b9aff05142603600e12080005007a01e300020016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb9ee5350db798262f3d40fad95667e00681ed0bffece4b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b093a13b183376e181643370e00"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d7, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x10004000000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0xf, 0x1, 0x81, 0x0, 0x5, 0x102, 0x5059c2c79070ff55, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x4, 0xb, 0x3, 0x4b0e, 0x7, 0x1ff, 0x0, 0x6, 0x0, 0xe}, r2, 0x10, r1, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xd18c9b25, &(0x7f00000002c0)=[{&(0x7f0000000300)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000700)={0x3, 0x80, 0x1, 0x2, 0x6, 0xd, 0x0, 0x6, 0x2400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000006c0), 0xc}, 0x103000, 0xffffffff00000001, 0x0, 0x3, 0x4, 0x9, 0x0, 0x0, 0x5, 0x0, 0x9}) sendmsg$sock(r6, &(0x7f0000000140)={&(0x7f0000000480)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/171, 0xab}], 0x1, &(0x7f0000000680)=""/41, 0x29}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000340)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000) 755.829652ms ago: executing program 2 (id=2347): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f0000000840)=@generic={0x3, "25d9382e12218fc862408efe8ac8aa986620f1791e4c02601915135d91e1e7c6b1f823e50587ba58ae177227914f887b4c83e311361a1b14a38e6b27f0a473353819538d876be3da38928bc35e11b4fc5888f04d7ee3b52d73b85ed967e6c69f265a5a6bf73c70bea69c4e317fde5200623e854bc63f0b1f10ff733697b8"}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="046244ada8c200935874afd2eaba595108c1a60d5faaa92488e077894f71d4ad1c0d82ea9a2e5fcc10ad5eed4fe25e2b0adf6b9823f143a4a5efb17ff80b128c72f331cb344934c27196a0cbfe626027b245db6bf491fbe5b13db772ccbaeaff95164f2c1445c93f8ced80431120f06cf5a727cdf4b8818aee74cfa89ee0baf0ead52868da7ed6012781f6487a2cb7afd13d34f2159cf31da3caa00b593c62207dbc022fc85170f9dc2053cd2ff99b40c399a45e03443d29c75f9e9ae5397d", 0xbf}, {&(0x7f0000000980)="d71ae10d484932025845c45cef8ee032f08bcbc6763cc699077d91cd3c0533c05c63ef48c84f2f70ca24eefb17c4f92030d387e2", 0x34}, {&(0x7f00000009c0)="02468132852475d30ad2316d4a4c05cf08f9cde28842c14bd8ea3868c832a153cc3c3f8338af925cf1b746332bfbafa2b18ec159deb2be2f14c6a81b181f9c61dab8cfb41615ecef02ce08cfab97da504f6faf62dd24c60541c8bf1443393e093a3b44a72b7898b5e59c50ba950712b498ab46b232c0c0edd86204539fa0ad84217891916f8f2d", 0x87}, {&(0x7f0000000a80)="e07b1d3f383474854abfff475a4078472b5700c4f0e3751a52962af8a5798f566f5be29afb1e9ad6bff9ab8a", 0x2c}, {&(0x7f0000000ac0)="5ba32f396501b540b78587982094187a24677b305b6e9059876ab0ff2f0f07905d1c2ad6f8276e9152ec6a9d951ea101c1b9ee0c5475c78e43a0e4b2bfb5247fc2bd7d045b25e0105891d5e61efdca81da89829f546224d78bc1ceb56935aced25e7d4fcb674f6747c2f06fbdccf49b7bbc570fa54f600648038970c28fd113fa7e5b9eb8ad41688782ee8b3391eb56b85844fb867501c3f2cb831f39c60b32e0ded18cf1ece7109b510d1b59c292949ee718114d792b2b90d25ff017d805a5bf2fbfb64b98f", 0xc6}], 0x5, &(0x7f0000001100)=[{0x48, 0x10f, 0x3, "b36cb15ae20ec874ef9a990d087f50d1bec1e528e6f47e55d18bba4d72437c748cc33687834019b5f652aaeb55fa4a0157c8"}, {0x108, 0x104, 0x80000001, "70e9f879f1ef3584c8a67805163c3f48181ffdba4ae26002264a6af01ae52ff9389a01d820a864d9cc19224d665bd5f3d756e229f83f679a9cdd47d33c7226af8b0eeefe384534de878a7126e2966fdfddcdc0c81cc2c27271fb4c3f0d69830707f41c45e9764eb9418cf58abc013a42878be6371a8f08e21206d4115cbd6da2962d823bb945e1ad6629ff78323ee63f0c66894aee5362c15f3e55696f6b855f7b3865d5eed66bd697981476e70114815739b4b62a5feff8915eae93d97212a22527f6135c4181ee7cd96a450ef19418df15514fcd8b12b1c2df89dc899cdb114ffb689911349795565b7a9891fb163157c0ae"}, {0xf0, 0x112, 0xe, "08697ce4e41cbfd43ba498f979b3471089a6fd1267c7153835a5a2fd691fc4365f35eebe68abc22592c530922d5b51385ff2bb95c3b66ff711c7c7f5b1454fb9f0de48921527944768473303cec9dec473f0b378fcba6520ab053e5dbbd65b0d282e5976492c22712b5b479dc79f31deed44b37ac93b24df21132bbec3f33194df5cfea9d2a8c7c5c58936dc7f2a209b89a71bc99d72834c47fd43b4186fc1abbbec6fc5df248f15a88a155d916c3477eed9cb62539bdc9374e4c09ebdd9f1518eaab68fe028909d87aba51819f75b11b1cb2ae5b9afd6301288fb7976186797"}, {0x100, 0x0, 0x6, "8fb7aac82a1f1a360b1ae9a8670bf7a3c2daea87b26c97407d867ee8c7eac1aee9638282a01999985ca907e0d346b4187208bc76e6fa7c3b00df20303b05d2cfb2ab7db9f183f7445ed5b2e60193b14d13a2d5a9cfdefc95793ed6dc6b6649bbb21cf0fc46a7813b171d9fb8a278f2885ee2f63eb2d73d65dfe9fdc560dd25c1417ea5d4f558c77210ba7870778d6145417697ff3a33b60ded18539554462c876f01b29b4913bed79b66446f860e9802fc5c8b0a390e99c1ec50a724fdf4732a94b293f63d8174d8ae3137501fdb54b5f49964986150bcd7501a1c9427d11e31e6fae14564d889a93a"}, {0xc0, 0x108, 0xfffffffd, "24de4c6a100c9220d8d6a945c6e2b9827ff1e26af6cfce170a381feb541517250090f4080d77f081407c82dfa4d65b41c16723c19f6d7f1046767e9a21fc05a7a9962df6dade9783b93e8bc20906219b8b384a4ac61391e310c4e15c6b8ebccdb4591c0878f66b09427b2c424929d42d697da9c9063c06be2199f5514b3ac1a5dc4f11fe20fc395e8cde1d8b81d7963d4f3c7d3a7747b112fd9683c8bfaa9d690a548eb63178653a950a5392d86ed1e8"}, {0x108, 0x112, 0x80, "7d214702543af2066ab18ed8b6ee55cc05ca266acfacfe4d3ae90a0d44a8fab1874f88ee0365afce4ef85e5ac14a379c53bb3996774f9570511956417349e54aefa9ee12d9443488520d6738b8f4eee5c0e83ddb4bae856834ad7e156c20d3ecf9df527b2e3add5230d6f45e2cb3c33548e5824b9cee69c06b6012cd15b560427d61af4d934f12d9507f950fadce2223b33bf361b95b6157db938d6eb3ccc6873c7f1f883307dbb6577edf75998bad71141556e7edce902823629ed315391fee1d33b1879a00be274f8424cea9e248dfb4cdbc61bf76e76ea727dc0da441f68f943e4e7c37cc777e1a9877ec17d06536733d64"}, {0x68, 0x103, 0x3ff, "6635ae18a1c6342f9eaf798d3a29d622c00f6d1d8ea9d6760a2409693151a977b4aefb09d9420c11dd3737ae6aeb6a6a3b302c237e47cbd8c088c768d5e823907813eabb73c92d5c8288a5afab879fd0554ca145382697"}, {0x100, 0x1, 0x6, "424cf376eae57072b8dcd27b09df4a679e8dd58ffda3138c83682613398168b7cead7ee49c59c6badb87f53a9f34e7463d5fa614261df94c98c272c4745cb28b366feb183f05c571646db366445c128d69f5029e791672d2862696eaadb97702862b3b5777e1d79e9f14e4df4f9719c4c4797572eebdc25e94ce946b44277d69dbba7566f8ec6cc14c3faa964b30030096b5dad9b582163e92ac7c87b0f92cd1c4300a18e9090a12e3f7eda1e2fa8aa0900adb821f70fe35dab638aed41f276dfad113faddbbd596065e67f60f6e34f98c44395816c0478924e84aac016e3229e6ce962ed2d5820a39ee"}], 0x670}, 0x40000) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, 0x0, 0x8040) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xf91, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x1ffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_clone(0x8000000, &(0x7f0000000100)="cc5e3db918ce65b567921aa16ae101597655c709edb3408be1a045f5e161a4df452c16415c0e30ec5b499335b8d6fbe7c084e6bd", 0x34, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000380)) write$cgroup_pid(r6, &(0x7f00000003c0)=r7, 0x12) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f00000000c0)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30040041) setsockopt$sock_attach_bpf(r8, 0x1, 0x9, &(0x7f0000000800), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 316.498193ms ago: executing program 0 (id=2348): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}, 0x4080) r2 = perf_event_open(&(0x7f0000000e80)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0xfefffffffffffffe, 0x2, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000f00), 0xcf) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="021200728e31456b015f2b45c85686605e85da4a", 0x14}], 0x1}, 0x4000) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000001000)={r4}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001040), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xc, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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", @ANYBLOB="40ff4beaa8588d622b52ffc29e9ae0605dc0f4c05bf523dde12a073683d309ae794725263f77841a98e0b29e3eb0239a6776c9e6c095739250924da523a3b5994dc406a81881f2c0e3adcd9ae35d0a7685792f6b5fa4524d91314b8119b2f617025eca2210e5824221b9a6f86350ff82658f0d1708d286de247b04", @ANYRES32=0xffffffffffffffff, @ANYRESDEC=r0, @ANYRES8=0x0], &(0x7f0000002080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r6, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000002140)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000240), 0x9) r10 = openat$cgroup_procs(r8, &(0x7f0000000280)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000300), 0x12) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000380)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000440)=0x1, 0x12) write$cgroup_int(r12, &(0x7f0000000540), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000001140)=ANY=[@ANYRES16=r2, @ANYBLOB="0f99985ee0f9a20b3b29060d6d6fa53138b13e77cbd9f612cc86fc8ffd1260066b4089a9470aaccb1bf8d21a322802a5be7f5cf07cf57ca881d4eeb1cb5e4399c4cb087a0dfb515c81862eb31c2e79680f20b35fdd06f165356124bd3b032ff79f2a579b5d9b03bad0ccf6ba3f2f4027d1b57efa82b00560892ca11531833d5fd91314a5199b213e7648dc0c9f87cd5f3825dcb392ed43c33c4127108b3d839c8edb5cba7bc176c691a0f001c8a4559f74b60f6c0635cc99335d4477cc35622930fbb7143fa6dc9eeb1a7bf7b4f2b1d2144dd18b0dc093a0c2886b3d2c66946280", @ANYRES64=r7, @ANYRES16=r5, @ANYRES8=r1, @ANYBLOB="c902c229fce2a168d78d150d605baf04b64a07314c32597d98e575f0c06c359f852b10b1ea1c35f99ef1af9c6d5364e8ef9eaf9b9ab452254eebb46f689726de8358b57123ca48e44d0c01e26551b5652ad188e09f6bad7fefc2c503ac8290cfc62585b0fef7dcef94cbd483131b74b0a859d53f19a369ee5b2dab0779e847c2626479b1b68af3ac59c527c0a2ea3d", @ANYBLOB="c5f1373c63d400d5fa82edfc14b762aa2279c71d47df428546b7fa8e236e041f4b38f56702d559de972ba2f20790ecdba92031b8cac6b5d20aa1162cf7f45204d3c1"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r12}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000ffffb702000008000000b70300000008000085000000060000009500"/96], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000a40)="e02742e8680d85ff978276a16114", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0xa1, 0x1, 0xfffffffe}, 0x0, 0x5, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c057, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 191.843716ms ago: executing program 1 (id=2349): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xff90}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x900) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) 0s ago: executing program 0 (id=2350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x10, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/20, 0x14}, {&(0x7f0000000740)=""/4100, 0xa83}, {&(0x7f0000001780)=""/209, 0xa5}, {&(0x7f0000001880)=""/218, 0xdc}, {&(0x7f0000001980)=""/108, 0x75}, {&(0x7f0000001a00)=""/239, 0xef}, {&(0x7f0000001b00)=""/154, 0xaa}, {&(0x7f0000001bc0)=""/219, 0xdb}, {&(0x7f0000001cc0)=""/171}, {&(0x7f0000001d80)=""/206}, {&(0x7f0000001e80)=""/124, 0x3a}], 0x8}, 0x102) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ink: 'syz.3.514': attribute type 10 has an invalid length. [ 209.353283][ T8043] nlmon0: entered promiscuous mode [ 209.395523][ T8043] nlmon0: entered allmulticast mode [ 209.406416][ T8052] netlink: 'syz.0.516': attribute type 3 has an invalid length. [ 209.423352][ T8043] team0: Device nlmon0 is of different type [ 209.511401][ T8052] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.516'. [ 211.507565][ T8063] netlink: 'syz.2.519': attribute type 29 has an invalid length. [ 211.530100][ T8063] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 211.551740][ T8063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.519'. [ 212.234976][ T8066] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 212.269472][ T8066] bridge0: port 3(team0) entered disabled state [ 212.322439][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 212.329345][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.335625][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 212.351901][ T8066] team0: left allmulticast mode [ 212.357779][ T8066] team_slave_0: left allmulticast mode [ 212.387950][ T8066] team_slave_1: left allmulticast mode [ 212.416937][ T8066] team0: left promiscuous mode [ 212.427108][ T8066] team_slave_0: left promiscuous mode [ 212.441526][ T8066] team_slave_1: left promiscuous mode [ 212.449188][ T8066] bridge0: port 3(team0) entered disabled state [ 212.487865][ T8066] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.500565][ T8066] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.518659][ T8074] netlink: 'syz.2.521': attribute type 2 has an invalid length. [ 212.587263][ T8074] netlink: 'syz.2.521': attribute type 8 has an invalid length. [ 212.640160][ T8074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.521'. [ 212.801369][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 213.089121][ T8084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 213.096899][ T8084] IPv6: NLM_F_CREATE should be set when creating new route [ 213.104914][ T8084] IPv6: NLM_F_CREATE should be set when creating new route [ 213.112596][ T8084] IPv6: NLM_F_CREATE should be set when creating new route [ 213.225128][ T8083] netlink: 'syz.0.524': attribute type 9 has an invalid length. [ 213.271325][ T8083] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.524'. [ 213.451707][ T8089] netlink: 'syz.0.524': attribute type 9 has an invalid length. [ 213.475732][ T8089] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.524'. [ 213.503066][ T8093] netlink: 'syz.2.526': attribute type 23 has an invalid length. [ 213.522000][ T8093] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.526'. [ 213.570620][ T8098] netlink: 'syz.2.526': attribute type 23 has an invalid length. [ 213.615820][ T8098] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.526'. [ 214.406341][ T8144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.541'. [ 214.533966][ T8147] netlink: 'syz.2.540': attribute type 2 has an invalid length. [ 214.571601][ T8147] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.540'. [ 214.692625][ T8147] netlink: 'syz.2.540': attribute type 39 has an invalid length. [ 215.559533][ T8168] syz.0.547[8168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.559691][ T8168] syz.0.547[8168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.174086][ T8175] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 216.201575][ T8175] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.551'. [ 216.996616][ T8183] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 217.011424][ T8183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.552'. [ 217.036460][ T8183] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 217.058803][ T8183] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.109628][ T8183] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 217.914939][ T8216] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.560'. [ 218.123683][ T8217] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.560'. [ 218.157253][ T8182] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.400557][ T8236] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.566'. [ 219.439513][ T8236] openvswitch: netlink: IP tunnel dst address not specified [ 219.613550][ T8234] netlink: 'syz.0.565': attribute type 3 has an invalid length. [ 219.662528][ T8234] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.565'. [ 220.294978][ T8245] netlink: 140 bytes leftover after parsing attributes in process `syz.1.569'. [ 220.342650][ T8245] netlink: 6 bytes leftover after parsing attributes in process `syz.1.569'. [ 221.823140][ T8276] netlink: 'syz.2.576': attribute type 10 has an invalid length. [ 221.870852][ T8276] macvlan1: entered allmulticast mode [ 221.968311][ T8276] veth1_vlan: entered allmulticast mode [ 222.067544][ T8276] team0: Port device macvlan1 added [ 222.153253][ T8282] netlink: 'syz.0.573': attribute type 11 has an invalid length. [ 222.188078][ T8282] netlink: 'syz.0.573': attribute type 2 has an invalid length. [ 222.210256][ T8282] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.573'. [ 222.672903][ T8290] rxe_eth0 speed is unknown, defaulting to 1000 [ 223.312278][ T8300] netlink: 763 bytes leftover after parsing attributes in process `syz.1.583'. [ 223.551258][ T8304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.584'. [ 223.718388][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.633558][ T8304] bridge_slave_0 (unregistering): left allmulticast mode [ 224.711480][ T8304] bridge_slave_0 (unregistering): left promiscuous mode [ 224.748295][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.911566][ T8324] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.588'. [ 226.084136][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 226.656581][ T8351] netlink: 'syz.2.595': attribute type 29 has an invalid length. [ 226.669635][ T8347] netlink: 'syz.2.595': attribute type 29 has an invalid length. [ 226.682025][ T8351] netlink: 'syz.2.595': attribute type 29 has an invalid length. [ 226.959794][ T8360] netlink: 'syz.1.597': attribute type 10 has an invalid length. [ 227.057773][ T8360] bridge0: port 4(team0) entered disabled state [ 227.199155][ T8360] team0: left allmulticast mode [ 227.207107][ T8360] team_slave_0: left allmulticast mode [ 227.228212][ T8360] team_slave_1: left allmulticast mode [ 227.247391][ T8360] team0: left promiscuous mode [ 227.259036][ T8360] team_slave_0: left promiscuous mode [ 227.271946][ T8360] team_slave_1: left promiscuous mode [ 227.288411][ T8360] bridge0: port 4(team0) entered disabled state [ 227.340129][ T8360] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.353696][ T8360] bond0: (slave team0): Enslaving as an active interface with an up link [ 227.711190][ T8354] syzkaller0: entered promiscuous mode [ 227.731615][ T8354] syzkaller0: entered allmulticast mode [ 227.747134][ T8363] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 227.767102][ T8363] geneve0: entered promiscuous mode [ 227.802030][ T8363] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 230.319198][ T8370] netlink: 'syz.1.600': attribute type 10 has an invalid length. [ 230.356337][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.383471][ T8370] bridge_slave_1: left allmulticast mode [ 230.389507][ T8370] bridge_slave_1: left promiscuous mode [ 230.400584][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.414863][ T8370] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 230.585129][ T8382] netlink: 'syz.0.603': attribute type 21 has an invalid length. [ 230.616267][ T8382] netlink: 'syz.0.603': attribute type 1 has an invalid length. [ 230.627466][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.656480][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.673289][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.699867][ T8383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.984561][ T8397] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.607'. [ 231.098107][ T8396] syzkaller0: entered promiscuous mode [ 231.103866][ T8396] syzkaller0: entered allmulticast mode [ 231.121580][ T6345] wlan1: Trigger new scan to find an IBSS to join [ 232.148462][ T993] wlan1: Creating new IBSS network, BSSID d6:5d:43:02:92:a0 [ 232.919122][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 232.940790][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 232.953377][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 232.966908][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 232.979749][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 232.992480][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 233.008702][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 233.021906][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 233.034993][ T8427] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.613'. [ 234.356043][ T8437] sit0: entered allmulticast mode [ 234.371520][ T8434] sit0: entered promiscuous mode [ 234.618831][ T8442] -: renamed from syzkaller0 [ 234.672383][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.695694][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.743649][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.791429][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.874380][ T8445] : renamed from bond0 (while UP) [ 235.369313][ T8454] Ÿë: port 1(gretap0) entered blocking state [ 235.376019][ T8454] Ÿë: port 1(gretap0) entered disabled state [ 235.385348][ T8454] gretap0: entered allmulticast mode [ 235.394938][ T8454] gretap0: entered promiscuous mode [ 235.408815][ T8454] Ÿë: port 2(veth0_to_team) entered blocking state [ 235.427135][ T8454] Ÿë: port 2(veth0_to_team) entered disabled state [ 235.445641][ T8454] veth0_to_team: entered allmulticast mode [ 235.463009][ T8454] veth0_to_team: entered promiscuous mode [ 235.862725][ T8469] netlink: 'syz.1.625': attribute type 39 has an invalid length. [ 237.473925][ T8515] delete_channel: no stack [ 237.908024][ T8518] __nla_validate_parse: 57 callbacks suppressed [ 237.908066][ T8518] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.636'. [ 238.095543][ T8526] TCP: TCP_TX_DELAY enabled [ 238.125999][ T8525] netlink: 'syz.1.638': attribute type 3 has an invalid length. [ 238.165835][ T8525] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.638'. [ 238.598571][ T8536] netlink: 107796 bytes leftover after parsing attributes in process `syz.2.641'. [ 238.649362][ T8536] netlink: 107796 bytes leftover after parsing attributes in process `syz.2.641'. [ 238.687783][ T8540] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 238.706995][ T8540] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.642'. [ 238.716463][ T8536] netlink: 107796 bytes leftover after parsing attributes in process `syz.2.641'. [ 238.773925][ T8536] netlink: 107796 bytes leftover after parsing attributes in process `syz.2.641'. [ 238.813398][ T8536] netlink: 107796 bytes leftover after parsing attributes in process `syz.2.641'. [ 238.840020][ T8536] netlink: 107796 bytes leftover after parsing attributes in process `syz.2.641'. [ 238.864231][ T8536] netlink: 107796 bytes leftover after parsing attributes in process `syz.2.641'. [ 239.066602][ T8549] rxe_eth0 speed is unknown, defaulting to 1000 [ 239.143315][ T8566] netlink: 'syz.3.648': attribute type 10 has an invalid length. [ 239.202658][ T8566] : (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 241.112537][ T8638] IPv6: Can't replace route, no match found [ 241.327581][ T8642] netlink: 'syz.0.668': attribute type 2 has an invalid length. [ 241.379705][ T8642] netlink: 'syz.0.668': attribute type 17 has an invalid length. [ 241.392122][ T8642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.670630][ T5790] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 242.135078][ T8659] syzkaller0: entered promiscuous mode [ 242.140832][ T8659] syzkaller0: entered allmulticast mode [ 242.151129][ T8661] : renamed from bond_slave_1 (while UP) [ 243.935471][ T8672] netlink: 'syz.2.676': attribute type 2 has an invalid length. [ 243.947520][ T8667] __nla_validate_parse: 30 callbacks suppressed [ 243.947537][ T8667] netlink: 14 bytes leftover after parsing attributes in process `syz.2.676'. [ 244.092898][ T8674] netlink: 'syz.1.678': attribute type 21 has an invalid length. [ 244.121655][ T8674] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.130443][ T8674] IPv6: Can't replace route, no match found [ 244.226147][ T8674] netlink: 'syz.1.678': attribute type 10 has an invalid length. [ 244.315189][ T8674] team0: Device wg1 is of different type [ 244.391742][ T8677] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 244.422891][ T8677] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.678'. [ 244.823375][ T8676] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.515935][ T8707] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.687'. [ 247.175141][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.0.693'. [ 247.283341][ T8723] netlink: 'syz.0.693': attribute type 39 has an invalid length. [ 247.311310][ T8726] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.694'. [ 247.320884][ T8726] openvswitch: netlink: Flow key attribute not present in set flow. [ 248.945392][ T8741] netlink: 'syz.1.699': attribute type 3 has an invalid length. [ 249.711720][ T8741] netlink: 'syz.1.699': attribute type 16 has an invalid length. [ 249.719772][ T8741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.699'. [ 250.319189][ T8747] netlink: 'syz.0.700': attribute type 21 has an invalid length. [ 250.341396][ T8747] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.360237][ T8747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.367581][ T8747] IPv6: NLM_F_CREATE should be set when creating new route [ 250.374981][ T8747] IPv6: NLM_F_CREATE should be set when creating new route [ 250.382315][ T8747] IPv6: NLM_F_CREATE should be set when creating new route [ 252.316809][ T8766] syzkaller0: entered promiscuous mode [ 252.329442][ T8766] syzkaller0: entered allmulticast mode [ 252.344631][ T8788] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 252.386707][ T8788] netlink: 'syz.1.709': attribute type 29 has an invalid length. [ 252.405739][ T8786] netlink: 152 bytes leftover after parsing attributes in process `syz.1.709'. [ 252.434282][ T8786] netlink: 6 bytes leftover after parsing attributes in process `syz.1.709'. [ 253.107235][ T8785] delete_channel: no stack [ 254.631118][ T8795] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 254.655458][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.711'. [ 254.929105][ T8805] netlink: 'syz.1.715': attribute type 2 has an invalid length. [ 254.976575][ T8805] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 255.043948][ T8805] netlink: 'syz.1.715': attribute type 2 has an invalid length. [ 255.075988][ T8800] can: request_module (can-proto-0) failed. [ 255.143682][ T8805] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 255.193746][ T8805] netlink: 'syz.1.715': attribute type 2 has an invalid length. [ 255.232636][ T8805] netlink: 'syz.1.715': attribute type 1 has an invalid length. [ 255.280580][ T8805] netlink: 'syz.1.715': attribute type 2 has an invalid length. [ 255.855012][ T8828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 255.872999][ T8828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 255.902547][ T8828] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 255.924061][ T8830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.719'. [ 255.940794][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.948170][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.174791][ T8832] netlink: 156784 bytes leftover after parsing attributes in process `syz.2.721'. [ 257.084424][ T8858] netlink: 126452 bytes leftover after parsing attributes in process `syz.0.727'. [ 257.291934][ T5790] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 260.262562][ T8880] netlink: 128 bytes leftover after parsing attributes in process `syz.2.732'. [ 260.397027][ T8880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.750162][ T8901] validate_nla: 127 callbacks suppressed [ 260.750207][ T8901] netlink: 'syz.0.740': attribute type 7 has an invalid length. [ 260.776939][ T8901] netlink: 'syz.0.740': attribute type 6 has an invalid length. [ 261.573649][ T8910] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 261.738406][ T8912] netlink: 156 bytes leftover after parsing attributes in process `syz.0.744'. [ 262.144465][ T8916] netlink: 'syz.2.743': attribute type 4 has an invalid length. [ 262.327410][ T8923] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.745'. [ 262.348813][ T8923] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.745'. [ 262.447425][ T8926] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.746'. [ 263.980519][ T8940] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.749'. [ 264.243060][ T6346] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.622289][ T8955] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.755'. [ 265.660291][ T8955] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 265.710113][ T8955] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 265.973303][ T8962] netlink: 'syz.2.757': attribute type 3 has an invalid length. [ 266.049278][ T8962] netlink: 'syz.2.757': attribute type 3 has an invalid length. [ 266.093895][ T8960] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.756'. [ 266.170551][ T8968] netlink: 184 bytes leftover after parsing attributes in process `syz.1.756'. [ 266.280116][ T8968] team_slave_0: entered allmulticast mode [ 266.889120][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 266.909575][ T8987] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 266.927297][ T8987] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.765'. [ 268.055973][ T9002] syzkaller0: entered promiscuous mode [ 268.117619][ T9002] syzkaller0: entered allmulticast mode [ 268.226894][ T9002] netlink: 'syz.2.770': attribute type 25 has an invalid length. [ 268.254643][ T9002] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 269.374932][ T9034] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.777'. [ 269.500013][ T9038] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.780'. [ 269.812331][ T9053] netlink: set zone limit has 8 unknown bytes [ 270.268092][ T9069] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.786'. [ 270.652858][ T9086] netlink: 'syz.3.791': attribute type 27 has an invalid length. [ 270.660675][ T9086] netlink: 'syz.3.791': attribute type 25 has an invalid length. [ 273.300058][ T9106] syzkaller0: entered promiscuous mode [ 273.305775][ T9106] syzkaller0: entered allmulticast mode [ 273.341641][ T9133] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 273.357905][ T9134] syzkaller0: tun_chr_ioctl cmd 35108 [ 273.492604][ T9140] netlink: 'syz.0.798': attribute type 21 has an invalid length. [ 273.500503][ T9140] netlink: 156 bytes leftover after parsing attributes in process `syz.0.798'. [ 273.548460][ T9140] bridge_slave_1: left allmulticast mode [ 273.561440][ T9140] bridge_slave_1: left promiscuous mode [ 273.567594][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.844642][ T9144] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 273.900349][ T9144] netlink: 'syz.3.799': attribute type 8 has an invalid length. [ 273.937633][ T9144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.799'. [ 274.994754][ T9175] netlink: 'syz.3.807': attribute type 10 has an invalid length. [ 275.031008][ T9175] team0: Device veth1_vlan failed to register rx_handler [ 275.265058][ T9177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.808'. [ 275.288231][ T9175] netlink: 'syz.3.807': attribute type 10 has an invalid length. [ 275.393154][ T9181] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 275.409516][ T9181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.805'. [ 275.440282][ T9181] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 275.461792][ T9181] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.490758][ T9181] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 275.504008][ T9186] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.810'. [ 275.534882][ T9186] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.810'. [ 275.550270][ T9186] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.810'. [ 276.618260][ T9215] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.818'. [ 276.632823][ T9215] openvswitch: netlink: Flow key attr not present in new flow. [ 276.797019][ T9222] tun0: tun_chr_ioctl cmd 1074812117 [ 276.860728][ T9222] netlink: 204220 bytes leftover after parsing attributes in process `syz.2.821'. [ 276.875789][ T9222] openvswitch: netlink: Flow key attr not present in new flow. [ 277.237405][ T9236] netlink: 'syz.3.824': attribute type 10 has an invalid length. [ 277.271746][ T9236] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.824'. [ 277.550549][ T9260] netlink: 'syz.1.828': attribute type 46 has an invalid length. [ 277.644612][ T9260] netlink: 'syz.1.828': attribute type 46 has an invalid length. [ 277.718967][ T9260] netlink: 'syz.1.828': attribute type 46 has an invalid length. [ 278.272341][ T9269] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 280.685503][ T9288] tap0: tun_chr_ioctl cmd 2147767511 [ 281.832207][ T9327] validate_nla: 30 callbacks suppressed [ 281.832224][ T9327] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 281.877312][ T9327] __nla_validate_parse: 34 callbacks suppressed [ 281.877330][ T9327] netlink: 60179 bytes leftover after parsing attributes in process `syz.2.848'. [ 281.967228][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.850'. [ 282.018913][ T9341] netlink: 'syz.1.851': attribute type 21 has an invalid length. [ 282.041055][ T9341] netlink: 'syz.1.851': attribute type 6 has an invalid length. [ 282.058374][ T9341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.851'. [ 282.423580][ T9351] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 283.312592][ T9351] team0: Device veth1_vlan is already a lower device of the team interface [ 283.534355][ T9358] syzkaller0: entered promiscuous mode [ 283.540226][ T9358] syzkaller0: entered allmulticast mode [ 287.417391][ T9392] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.862'. [ 287.656833][ T9400] netlink: 'syz.3.865': attribute type 6 has an invalid length. [ 287.674534][ T9400] netlink: 212896 bytes leftover after parsing attributes in process `syz.3.865'. [ 288.500503][ T9422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.870'. [ 289.060157][ T9431] netlink: 'syz.3.873': attribute type 28 has an invalid length. [ 290.821050][ T9433] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.874'. [ 291.370970][ T9454] netlink: 152 bytes leftover after parsing attributes in process `syz.0.881'. [ 291.381869][ T9454] netlink: 6 bytes leftover after parsing attributes in process `syz.0.881'. [ 291.396071][ T9454] netlink: 'syz.0.881': attribute type 21 has an invalid length. [ 291.404286][ T9454] netlink: 100 bytes leftover after parsing attributes in process `syz.0.881'. [ 291.597244][ T9454] netlink: 'syz.0.881': attribute type 3 has an invalid length. [ 291.606584][ T9454] netlink: 'syz.0.881': attribute type 6 has an invalid length. [ 291.620540][ T9454] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.881'. [ 292.536346][ T9480] netlink: 'syz.2.890': attribute type 6 has an invalid length. [ 292.557323][ T9480] netlink: 164 bytes leftover after parsing attributes in process `syz.2.890'. [ 293.781647][ T9505] netlink: 'syz.0.897': attribute type 5 has an invalid length. [ 294.304478][ T9518] netlink: 'syz.3.901': attribute type 3 has an invalid length. [ 294.379852][ T9518] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.901'. [ 294.656295][ T9517] netlink: 'syz.1.900': attribute type 10 has an invalid length. [ 294.694392][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.900'. [ 294.729616][ T9517] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 295.161742][ T9538] netlink: 'syz.2.904': attribute type 2 has an invalid length. [ 296.039192][ T9549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.907'. [ 296.242129][ T12] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.997756][ T9574] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 297.064344][ T9574] syzkaller0: entered promiscuous mode [ 297.082567][ T9574] syzkaller0: entered allmulticast mode [ 300.630096][ T9587] À: port 1(47ÿ) entered blocking state [ 300.636500][ T9587] À: port 1(47ÿ) entered disabled state [ 300.643277][ T9587] ÿ: entered allmulticast mode [ 300.649597][ T9587] ÿ: entered promiscuous mode [ 300.872130][ T9601] netlink: 'syz.0.919': attribute type 29 has an invalid length. [ 300.893820][ T9601] netlink: 'syz.0.919': attribute type 29 has an invalid length. [ 300.945955][ T9601] netlink: 'syz.0.919': attribute type 29 has an invalid length. [ 301.454210][ T9621] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.925'. [ 301.474237][ T9621] openvswitch: netlink: IP tunnel dst address not specified [ 301.500810][ T9626] netlink: 763 bytes leftover after parsing attributes in process `syz.3.927'. [ 301.838751][ T9641] netlink: 164 bytes leftover after parsing attributes in process `syz.0.931'. [ 302.393984][ T9652] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.936'. [ 302.955347][ T9659] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.937'. [ 303.269309][ T9671] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.940'. [ 304.642240][ T9666] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 304.649053][ T9666] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 304.663130][ T9665] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 304.670169][ T9665] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 304.681035][ T9671] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.940'. [ 304.885464][ T9683] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.941'. [ 305.033512][ T9693] netlink: 14 bytes leftover after parsing attributes in process `syz.3.946'. [ 305.071627][ T9693] netlink: get zone limit has 4 unknown bytes [ 305.334343][ T9701] netlink: 'syz.2.948': attribute type 39 has an invalid length. [ 305.356821][ T9710] netlink: 26 bytes leftover after parsing attributes in process `syz.3.950'. [ 305.417267][ T9712] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 305.494876][ T9710] netlink: 'syz.3.950': attribute type 39 has an invalid length. [ 305.568817][ T9712] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 305.581508][ T9712] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 305.592293][ T9712] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 305.615704][ T9712] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 305.844980][ T9723] syzkaller0: entered promiscuous mode [ 305.869626][ T9723] syzkaller0: entered allmulticast mode [ 305.903108][ T9712] validate_nla: 33 callbacks suppressed [ 305.903126][ T9712] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 307.298479][ T9749] __nla_validate_parse: 41 callbacks suppressed [ 307.298499][ T9749] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.960'. [ 308.072647][ T9734] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 308.109509][ T9740] netlink: 'syz.2.954': attribute type 21 has an invalid length. [ 308.132022][ T9740] netlink: 128 bytes leftover after parsing attributes in process `syz.2.954'. [ 308.141097][ T9740] netlink: 'syz.2.954': attribute type 4 has an invalid length. [ 308.149715][ T9740] netlink: 'syz.2.954': attribute type 3 has an invalid length. [ 308.159662][ T9740] netlink: 3 bytes leftover after parsing attributes in process `syz.2.954'. [ 308.293739][ T9754] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.961'. [ 308.370376][ T9758] netlink: 'syz.2.962': attribute type 153 has an invalid length. [ 308.378419][ T9758] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.962'. [ 308.450566][ T9763] netlink: 'syz.2.962': attribute type 153 has an invalid length. [ 308.478102][ T9763] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.962'. [ 308.634702][ T9777] netlink: 132 bytes leftover after parsing attributes in process `syz.0.966'. [ 309.180064][ T9787] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.092890][ T9802] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.973'. [ 310.386667][ T9808] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.452079][ T9814] netlink: 'syz.3.975': attribute type 39 has an invalid length. [ 311.146090][ T9820] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.977'. [ 311.372299][ T9829] netlink: 'syz.1.978': attribute type 33 has an invalid length. [ 311.387299][ T9829] netlink: 128 bytes leftover after parsing attributes in process `syz.1.978'. [ 311.550440][ T9833] IPv6: Can't replace route, no match found [ 311.699302][ T9833] openvswitch: netlink: Key type 29 is not supported [ 313.969229][ T9859] pim6reg1: entered promiscuous mode [ 314.026768][ T9859] pim6reg1: entered allmulticast mode [ 314.734682][ T9873] netlink: 'syz.2.988': attribute type 29 has an invalid length. [ 314.904764][ T9874] netlink: 'syz.2.988': attribute type 29 has an invalid length. [ 315.262307][ T9873] netlink: 'syz.2.988': attribute type 29 has an invalid length. [ 315.488909][ T9890] __nla_validate_parse: 1 callbacks suppressed [ 315.488949][ T9890] netlink: 10 bytes leftover after parsing attributes in process `syz.1.992'. [ 315.868989][ T9902] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 315.906284][ T9902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.996'. [ 315.931399][ T9902] batman_adv: batadv0: Adding interface: virt_wifi0 [ 315.938228][ T9902] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.978416][ T9902] batman_adv: batadv0: Interface activated: virt_wifi0 [ 316.082387][ T9907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.995'. [ 316.110188][ T9907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.995'. [ 316.126407][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.995'. [ 316.136731][ T9899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.995'. [ 316.953917][ T9917] netlink: 'syz.3.999': attribute type 39 has an invalid length. [ 317.408433][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.415123][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.440273][ T9919] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 318.128557][ T9955] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1005'. [ 318.161194][ T9955] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1005'. [ 319.408708][ T9972] rxe_eth0 speed is unknown, defaulting to 1000 [ 319.712405][ T9984] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1012'. [ 319.750820][ T9985] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1012'. [ 319.790311][ T9988] netlink: 'syz.2.1013': attribute type 19 has an invalid length. [ 320.207969][ T9991] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 320.227865][ T9991] hsr0: entered promiscuous mode [ 320.258949][ T9991] bridge0: port 2(hsr0) entered blocking state [ 320.270877][ T9991] bridge0: port 2(hsr0) entered disabled state [ 320.301619][ T9991] hsr0: entered allmulticast mode [ 320.306765][ T9991] hsr_slave_0: entered allmulticast mode [ 320.340130][ T9991] hsr_slave_1: entered allmulticast mode [ 320.365652][ T9991] bridge0: port 2(hsr0) entered blocking state [ 320.372100][ T9991] bridge0: port 2(hsr0) entered forwarding state [ 320.424505][ T9996] netlink: 'syz.3.1016': attribute type 46 has an invalid length. [ 320.442991][ T9995] netlink: 'syz.3.1016': attribute type 46 has an invalid length. [ 320.465491][T10000] netlink: 'syz.1.1017': attribute type 6 has an invalid length. [ 320.509321][T10000] __nla_validate_parse: 2 callbacks suppressed [ 320.509341][T10000] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1017'. [ 320.913884][T10009] netlink: 'syz.1.1020': attribute type 49 has an invalid length. [ 320.944893][T10009] netlink: 'syz.1.1020': attribute type 10 has an invalid length. [ 321.088946][T10009] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 321.219807][T10026] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1022'. [ 321.241006][T10026] netlink: get zone limit has 4 unknown bytes [ 321.616750][T10037] netlink: 'syz.1.1023': attribute type 5 has an invalid length. [ 321.675778][T10037] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1023'. [ 322.142781][T10047] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1026'. [ 324.715990][T10082] netlink: 'syz.3.1035': attribute type 21 has an invalid length. [ 325.105354][T10086] rxe_eth0 speed is unknown, defaulting to 1000 [ 325.487421][T10098] -1: renamed from syzkaller0 [ 326.616143][T10108] veth1_vlan (unregistering): left allmulticast mode [ 326.754211][T10108] bond0: (slave macvlan0): Releasing backup interface [ 326.937014][T10117] netlink: 'syz.0.1043': attribute type 10 has an invalid length. [ 326.946370][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1043'. [ 327.085794][T10121] netlink: 'syz.1.1044': attribute type 39 has an invalid length. [ 327.155583][T10125] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1044'. [ 327.199531][T10125] openvswitch: netlink: IP tunnel dst address not specified [ 327.748669][ T993] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.789460][T10129] rxe_eth0 speed is unknown, defaulting to 1000 [ 328.262935][T10148] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1049'. [ 328.448876][T10150] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.1050'. [ 331.183068][T10170] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1056'. [ 331.229564][T10170] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1056'. [ 335.679903][T10216] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1066'. [ 335.775463][T10220] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1068'. [ 335.827433][T10220] netlink: 'syz.1.1068': attribute type 10 has an invalid length. [ 336.242014][T10218] rxe_eth0 speed is unknown, defaulting to 1000 [ 336.990240][T10241] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1074'. [ 340.942566][T10293] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1086'. [ 342.094438][T10305] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1086'. [ 348.992735][T10376] rxe_eth0 speed is unknown, defaulting to 1000 [ 351.202154][T10395] veth1_macvtap: left promiscuous mode [ 351.222129][T10395] macsec0: entered allmulticast mode [ 351.248012][T10396] netlink: 'syz.0.1108': attribute type 21 has an invalid length. [ 351.276672][T10396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.305184][T10397] veth1_macvtap: entered promiscuous mode [ 351.335381][T10397] veth1_macvtap: entered allmulticast mode [ 351.353036][T10397] macsec0: entered promiscuous mode [ 351.592216][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 352.247389][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 352.256430][T10404] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1109'. [ 352.266078][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 352.281288][T10404] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1109'. [ 352.301505][T10402] netlink: 'syz.3.1109': attribute type 21 has an invalid length. [ 352.679269][T10421] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 352.702092][T10421] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 352.776854][T10424] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 354.881475][T10455] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1122'. [ 355.111814][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.389643][T10477] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1130'. [ 357.223954][T10484] syzkaller0: entered promiscuous mode [ 357.291890][T10484] syzkaller0: entered allmulticast mode [ 357.754056][T10488] netlink: 'syz.0.1133': attribute type 21 has an invalid length. [ 357.822125][T10488] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.260590][T10186] syz.2.1054 (10186) used greatest stack depth: 17800 bytes left [ 359.602430][ T6338] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 359.854337][T10494] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 359.861145][T10494] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 359.896349][T10495] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 359.921776][T10500] netlink: 'syz.3.1135': attribute type 6 has an invalid length. [ 359.930619][T10495] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 359.947104][T10500] netlink: 'syz.3.1135': attribute type 3 has an invalid length. [ 360.015533][T10500] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.1135'. [ 360.590013][T10513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1137'. [ 360.663876][T10513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1137'. [ 360.760406][T10518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1137'. [ 361.030894][T10508] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1137'. [ 361.481961][T10508] hsr_slave_0: left promiscuous mode [ 362.001855][T10508] hsr_slave_1: left promiscuous mode [ 362.097697][T10508] bridge0: port 2(hsr0) entered disabled state [ 362.261920][T10508] hsr0 (unregistering): left allmulticast mode [ 362.294153][T10508] bridge0: port 2(hsr0) entered disabled state [ 362.371479][T10532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1142'. [ 362.404956][T10533] netlink: 'syz.3.1142': attribute type 12 has an invalid length. [ 362.451337][T10533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1142'. [ 362.493222][T10534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1142'. [ 362.935648][T10543] veth1_macvtap: left promiscuous mode [ 362.963363][T10543] macsec0: entered allmulticast mode [ 363.064737][T10549] netlink: 'syz.3.1147': attribute type 39 has an invalid length. [ 363.261559][T10556] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1149'. [ 363.289589][T10556] netlink: 'syz.1.1149': attribute type 39 has an invalid length. [ 363.317395][T10555] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1149'. [ 366.420991][T10624] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1162'. [ 366.450854][T10624] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 366.540604][T10624] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 366.995587][T10633] netlink: 'syz.1.1164': attribute type 5 has an invalid length. [ 367.100945][T10636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1164'. [ 367.151401][T10636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1164'. [ 367.171021][T10633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1164'. [ 368.305201][T10648] netlink: 'syz.3.1168': attribute type 2 has an invalid length. [ 368.349948][T10646] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1168'. [ 368.770434][T10653] netlink: 'syz.3.1168': attribute type 17 has an invalid length. [ 368.819789][T10653] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1168'. [ 368.850054][T10653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.191261][T10637] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1165'. [ 369.200409][T10637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.595415][T10668] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 369.637629][T10668] netlink: 'syz.0.1171': attribute type 6 has an invalid length. [ 369.697379][T10668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1171'. [ 370.623498][T10680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1174'. [ 372.970919][T10706] netlink: 'syz.3.1181': attribute type 11 has an invalid length. [ 372.976963][T10708] netlink: 'syz.0.1183': attribute type 11 has an invalid length. [ 373.022587][T10708] netlink: 126292 bytes leftover after parsing attributes in process `syz.0.1183'. [ 373.244325][ T5790] Bluetooth: hci3: unexpected event 0x20 length: 151 > 7 [ 373.389815][T10714] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.1184'. [ 375.686163][T10780] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1216'. [ 376.849478][T10824] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 376.867860][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.917575][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.924891][T10824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.985703][T10824] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 378.806340][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.816274][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.368083][T10918] netlink: 'syz.0.1281': attribute type 9 has an invalid length. [ 379.378310][T10918] netlink: 975 bytes leftover after parsing attributes in process `syz.0.1281'. [ 379.995738][T10944] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 380.009437][T10944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1294'. [ 380.031724][T10944] bridge0: port 2(team0) entered blocking state [ 380.039525][T10944] bridge0: port 2(team0) entered disabled state [ 380.052220][T10944] team0: entered allmulticast mode [ 380.061410][T10944] team_slave_1: entered allmulticast mode [ 380.112235][T10944] team0: entered promiscuous mode [ 380.117823][T10944] team_slave_1: entered promiscuous mode [ 380.125876][T10944] macvlan1: entered promiscuous mode [ 380.158777][T10944] bridge0: port 2(team0) entered blocking state [ 380.166125][T10944] bridge0: port 2(team0) entered forwarding state [ 380.486729][T10964] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.1301'. [ 381.169134][T10975] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 381.177732][T10975] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1305'. [ 381.616716][T10988] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1313'. [ 381.824756][T10994] netlink: 'syz.3.1314': attribute type 10 has an invalid length. [ 381.833077][T10994] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1314'. [ 381.843382][T10994] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 382.006054][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1314'. [ 382.357901][T10990] netlink: 'syz.1.1311': attribute type 10 has an invalid length. [ 382.366341][T10990] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1311'. [ 382.377252][T10990] bond0: (slave team0): Releasing backup interface [ 382.395782][T10990] bridge0: port 2(team0) entered blocking state [ 382.422727][T10990] bridge0: port 2(team0) entered disabled state [ 382.429541][T10990] team0: entered allmulticast mode [ 382.461527][T10990] team_slave_1: entered allmulticast mode [ 382.470008][T10990] team0: entered promiscuous mode [ 382.491618][T10990] team_slave_0: entered promiscuous mode [ 382.538424][T10990] team_slave_1: entered promiscuous mode [ 382.553073][T10992] netlink: 'syz.3.1314': attribute type 10 has an invalid length. [ 382.561442][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1314'. [ 382.572794][T10995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1314'. [ 382.639885][T11000] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 382.640993][T10998] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 382.831833][T11005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 382.878042][T11005] netlink: 'syz.0.1320': attribute type 9 has an invalid length. [ 383.200189][T11022] netlink: 'syz.0.1320': attribute type 9 has an invalid length. [ 383.284870][T11014] netlink: 'syz.1.1321': attribute type 3 has an invalid length. [ 383.819361][T11043] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 384.071078][T11043] syzkaller0: entered promiscuous mode [ 384.094738][T11043] syzkaller0: entered allmulticast mode [ 384.353435][T11047] syzkaller0: entered promiscuous mode [ 384.370946][T11047] syzkaller0: entered allmulticast mode [ 389.209605][T11078] __nla_validate_parse: 6 callbacks suppressed [ 389.209645][T11078] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.1333'. [ 389.323133][T11080] netlink: 'syz.3.1334': attribute type 10 has an invalid length. [ 389.331660][T11080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1334'. [ 389.785755][T11091] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 389.797861][T11091] veth0_vlan: left promiscuous mode [ 389.810176][T11091] veth0_vlan: entered promiscuous mode [ 389.824551][T11091] team0: Device veth0_vlan failed to register rx_handler [ 390.606378][T11103] netlink: 'syz.3.1342': attribute type 3 has an invalid length. [ 390.629580][T11103] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1342'. [ 390.907295][T11112] delete_channel: no stack [ 390.969621][T11110] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 391.084965][T11122] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1348'. [ 391.158771][T11110] syzkaller0: entered promiscuous mode [ 391.166948][T11110] syzkaller0: entered allmulticast mode [ 391.177408][T11121] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1348'. [ 391.206552][T11121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.273639][T11125] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 391.286557][T11125] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 391.383452][T11129] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1350'. [ 391.606427][ T6338] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.983144][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.031583][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.043274][T11164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.077471][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.111941][T11170] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.314554][T11163] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.395166][T11164] netlink: 'syz.2.1357': attribute type 3 has an invalid length. [ 395.423515][T11170] netlink: 'syz.2.1357': attribute type 3 has an invalid length. [ 395.469478][T11164] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.501399][T11170] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1357'. [ 395.714387][T11184] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1360'. [ 395.753734][T11184] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1360'. [ 395.996275][T11194] : port 1(ip6gretap0) entered blocking state [ 396.012052][T11194] : port 1(ip6gretap0) entered disabled state [ 396.031575][T11194] ip6gretap0: entered allmulticast mode [ 396.064985][T11194] ip6gretap0: entered promiscuous mode [ 396.079841][T11193] ip6gretap0: left allmulticast mode [ 396.089493][T11193] ip6gretap0: left promiscuous mode [ 396.103414][T11193] : port 1(ip6gretap0) entered disabled state [ 396.399219][T11209] netlink: 'syz.3.1369': attribute type 21 has an invalid length. [ 396.410351][T11208] tap0: tun_chr_ioctl cmd 1074025675 [ 396.421499][T11208] tap0: persist enabled [ 396.431995][T11208] tap0: tun_chr_ioctl cmd 1074025675 [ 396.437350][T11208] tap0: persist enabled [ 396.620227][T11214] syz.0.1370 (11214) used obsolete PPPIOCDETACH ioctl [ 396.827268][T11211] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 397.580107][T11211] syzkaller0: entered promiscuous mode [ 397.586661][T11211] syzkaller0: entered allmulticast mode [ 399.369821][T11236] netlink: 'syz.1.1377': attribute type 29 has an invalid length. [ 399.378613][T11237] netlink: 'syz.1.1377': attribute type 10 has an invalid length. [ 399.386687][T11237] batadv_slave_0: entered promiscuous mode [ 399.396934][T11237] batadv_slave_0: entered allmulticast mode [ 399.405922][T11237] bond0: (slave batadv_slave_0): Releasing backup interface [ 399.422865][T11237] bridge0: port 4(batadv_slave_0) entered blocking state [ 399.430864][T11237] bridge0: port 4(batadv_slave_0) entered disabled state [ 399.567612][T11246] netlink: 'syz.2.1379': attribute type 2 has an invalid length. [ 399.578593][T11243] macsec0: entered promiscuous mode [ 399.588200][T11243] macsec0: entered allmulticast mode [ 399.595684][T11243] veth1_macvtap: entered allmulticast mode [ 399.732580][T11249] netlink: 'syz.0.1381': attribute type 39 has an invalid length. [ 399.806479][T11240] : port 1(ip6gretap0) entered blocking state [ 399.829721][T11240] : port 1(ip6gretap0) entered disabled state [ 399.844130][T11240] ip6gretap0: entered allmulticast mode [ 399.879873][T11240] ip6gretap0: entered promiscuous mode [ 399.898543][T11250] ip6gretap0: left allmulticast mode [ 399.905737][T11250] ip6gretap0: left promiscuous mode [ 399.911286][T11250] : port 1(ip6gretap0) entered disabled state [ 400.173973][T11270] netlink: 'syz.3.1387': attribute type 29 has an invalid length. [ 400.204448][T11270] netlink: 'syz.3.1387': attribute type 10 has an invalid length. [ 400.221324][T11270] __nla_validate_parse: 5 callbacks suppressed [ 400.221339][T11270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1387'. [ 400.265202][T11270] batadv_slave_0: entered promiscuous mode [ 400.271104][T11270] batadv_slave_0: entered allmulticast mode [ 400.309221][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.337652][T11270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.371723][T11270] bridge0: port 3(batadv_slave_0) entered blocking state [ 400.399480][T11270] bridge0: port 3(batadv_slave_0) entered disabled state [ 400.421053][T11270] bridge0: port 3(batadv_slave_0) entered blocking state [ 400.428337][T11270] bridge0: port 3(batadv_slave_0) entered forwarding state [ 400.947279][T11295] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1392'. [ 401.576385][T11310] netlink: 'syz.3.1403': attribute type 8 has an invalid length. [ 401.631284][T11310] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1403'. [ 401.774750][T11315] : port 1(ip6gretap0) entered blocking state [ 401.782264][T11315] : port 1(ip6gretap0) entered disabled state [ 401.788678][T11315] ip6gretap0: entered allmulticast mode [ 401.816597][T11315] ip6gretap0: entered promiscuous mode [ 401.896370][T11316] ip6gretap0: left allmulticast mode [ 401.941319][T11316] ip6gretap0: left promiscuous mode [ 401.946964][T11316] : port 1(ip6gretap0) entered disabled state [ 401.973687][T11306] rxe_eth0 speed is unknown, defaulting to 1000 [ 402.362262][T11331] netlink: 'syz.0.1400': attribute type 29 has an invalid length. [ 402.392500][T11331] netlink: 'syz.0.1400': attribute type 10 has an invalid length. [ 402.418528][T11331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1400'. [ 402.430672][T11331] batadv_slave_0: entered promiscuous mode [ 402.436958][T11331] batadv_slave_0: entered allmulticast mode [ 402.445316][T11331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.475908][T11331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.502993][T11331] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 402.845075][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1402'. [ 402.917187][T11341] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1402'. [ 402.962890][T11341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.444919][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1408'. [ 403.725538][T11362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 403.749630][T11362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 403.774180][T11358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1411'. [ 404.289075][T11368] sit0: entered allmulticast mode [ 404.347929][T11366] sit0: entered promiscuous mode [ 404.857105][T11376] netlink: 'syz.2.1416': attribute type 29 has an invalid length. [ 404.911952][T11376] netlink: 'syz.2.1416': attribute type 10 has an invalid length. [ 404.971305][T11376] batadv_slave_0: entered promiscuous mode [ 404.977232][T11376] batadv_slave_0: entered allmulticast mode [ 405.006981][T11376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.014860][T11376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.056750][T11376] bridge0: port 3(batadv_slave_0) entered blocking state [ 405.077145][T11376] bridge0: port 3(batadv_slave_0) entered disabled state [ 405.096594][T11376] bridge0: port 3(batadv_slave_0) entered blocking state [ 405.103875][T11376] bridge0: port 3(batadv_slave_0) entered forwarding state [ 406.348314][T11411] netlink: 'syz.3.1426': attribute type 21 has an invalid length. [ 406.397073][T11411] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 406.464435][T11411] __nla_validate_parse: 2 callbacks suppressed [ 406.464454][T11411] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1426'. [ 406.693715][T11411] netlink: 'syz.3.1426': attribute type 29 has an invalid length. [ 407.059547][T11426] netlink: 'syz.2.1429': attribute type 29 has an invalid length. [ 407.077821][T11426] netlink: 'syz.2.1429': attribute type 29 has an invalid length. [ 407.151579][T11428] netlink: 'syz.2.1429': attribute type 29 has an invalid length. [ 407.190079][T11420] sit0: entered promiscuous mode [ 407.416946][T11434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 407.543146][T11434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 407.579274][T11431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1432'. [ 408.291411][T11465] netlink: 'syz.3.1441': attribute type 21 has an invalid length. [ 408.299356][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1441'. [ 408.331396][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1441'. [ 408.441137][T11469] netlink: 'syz.0.1443': attribute type 4 has an invalid length. [ 408.450890][T11469] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1443'. [ 408.517864][T11469] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1443'. [ 408.705825][T11476] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1448'. [ 408.719716][T11477] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 408.736482][T11477] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 408.770884][T11479] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 408.833166][T11481] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 408.945440][T11477] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1446'. [ 409.079768][T11485] sit0: left promiscuous mode [ 409.221508][T11487] sit0: entered promiscuous mode [ 410.453027][T11531] netlink: set zone limit has 8 unknown bytes [ 411.697782][T11542] bond0: (slave geneve0): Releasing backup interface [ 411.825565][T11546] sit0: left promiscuous mode [ 411.952916][T11547] sit0: entered promiscuous mode [ 412.492313][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 414.424768][T11596] validate_nla: 3 callbacks suppressed [ 414.424786][T11596] netlink: 'syz.2.1474': attribute type 5 has an invalid length. [ 414.811338][T11606] netlink: 'syz.2.1474': attribute type 5 has an invalid length. [ 415.588543][T11615] syzkaller0: entered promiscuous mode [ 415.626240][T11615] syzkaller0: entered allmulticast mode [ 415.659278][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 415.672851][T10012] syzkaller0: tun_net_xmit 48 [ 419.086072][T11640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1482'. [ 419.096614][T11642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1482'. [ 420.199668][T11661] netlink: 'syz.0.1485': attribute type 3 has an invalid length. [ 420.207696][T11661] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1485'. [ 421.179510][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 421.181701][T11675] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1490'. [ 422.209271][T11699] -: renamed from syzkaller0 [ 422.349892][T11697] can: request_module (can-proto-0) failed. [ 423.602500][T10012] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 425.413208][T11762] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 425.438504][T11762] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1510'. [ 425.483895][T11771] netlink: 'syz.1.1510': attribute type 39 has an invalid length. [ 425.732904][T11778] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 425.801254][T11778] netlink: 'syz.2.1512': attribute type 4 has an invalid length. [ 425.841495][T11778] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1512'. [ 425.980089][T11781] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1515'. [ 426.558689][T11787] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1515'. [ 426.897426][T11797] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.634120][T11821] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 427.646355][T11821] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 427.662470][T11821] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 427.692105][T11821] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 427.719461][T11821] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 428.280742][T11837] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.869458][T11859] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 430.361581][T11864] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1533'. [ 430.568554][T11870] validate_nla: 1 callbacks suppressed [ 430.568571][T11870] netlink: 'syz.3.1536': attribute type 2 has an invalid length. [ 430.592550][T11870] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1536'. [ 431.802673][T11894] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1541'. [ 431.944088][T11899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1541'. [ 432.808753][T11893] macvlan1 (unregistering): left promiscuous mode [ 432.827295][T11893] team0: Port device macvlan1 removed [ 433.285886][T11909] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1547'. [ 434.069864][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.403203][T11924] hsr_slave_0: entered promiscuous mode [ 434.410330][T11924] team0: Port device hsr_slave_0 added [ 434.438521][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.494744][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.509758][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.520512][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.534355][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.544991][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.554526][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.574653][T11924] netlink: 'syz.2.1553': attribute type 10 has an invalid length. [ 434.590002][T11932] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1554'. [ 434.797720][T11939] netlink: 279 bytes leftover after parsing attributes in process `syz.0.1557'. [ 434.831261][T11939] bridge_slave_1: default FDB implementation only supports local addresses [ 435.504427][T11954] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1562'. [ 435.608811][T11953] rxe_eth0 speed is unknown, defaulting to 1000 [ 436.624881][T11980] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1567'. [ 437.769139][T12003] rxe_eth0 speed is unknown, defaulting to 1000 [ 439.599526][T12034] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 439.989345][T12042] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1583'. [ 440.135223][T12043] validate_nla: 54 callbacks suppressed [ 440.135370][T12043] netlink: 'syz.1.1583': attribute type 21 has an invalid length. [ 440.162670][T12043] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1583'. [ 440.184464][T12049] sit0: left promiscuous mode [ 440.258685][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.265477][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.276005][T12048] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.324080][T12045] sit0: entered promiscuous mode [ 440.939406][T12077] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1592'. [ 441.677634][T12085] sit0: left promiscuous mode [ 443.635893][T12121] netlink: 'syz.2.1603': attribute type 10 has an invalid length. [ 443.647642][T12121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1603'. [ 444.488756][T12150] Â: renamed from ip6gretap0 (while UP) [ 444.732548][T12151] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.811261][T12159] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1615'. [ 444.838101][T12157] netlink: 'syz.3.1614': attribute type 1 has an invalid length. [ 444.853217][T12157] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1614'. [ 444.894853][T12159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.981651][T12161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1615'. [ 445.042177][T12161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.196184][T12169] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1616'. [ 446.291965][T12169] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 449.539192][T12209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1625'. [ 449.576076][T12209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1625'. [ 449.605720][T12208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1625'. [ 449.651903][T12209] netlink: 'syz.0.1625': attribute type 3 has an invalid length. [ 449.700565][T12209] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1625'. [ 450.365507][T12213] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.082636][T12246] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1635'. [ 452.679020][T12251] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1636'. [ 452.797417][T12253] pim6reg1: entered promiscuous mode [ 452.806063][T12253] pim6reg1: entered allmulticast mode [ 455.640191][T10018] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 455.805637][T12282] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1645'. [ 455.891345][T12284] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1646'. [ 456.054390][T12286] netlink: 'syz.1.1646': attribute type 29 has an invalid length. [ 456.088674][T12286] netlink: 'syz.1.1646': attribute type 29 has an invalid length. [ 456.138540][T12290] netlink: 'syz.1.1646': attribute type 29 has an invalid length. [ 456.410125][T12284] netlink: 'syz.1.1646': attribute type 29 has an invalid length. [ 456.536806][T12289] netlink: 'syz.2.1648': attribute type 10 has an invalid length. [ 457.463952][T12286] netlink: 'syz.1.1646': attribute type 29 has an invalid length. [ 457.758932][T12300] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.916339][T12313] netlink: 'syz.3.1653': attribute type 1 has an invalid length. [ 458.031403][T12313] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1653'. [ 462.205692][T12349] netlink: 'syz.3.1661': attribute type 6 has an invalid length. [ 465.996854][T12363] rxe_eth0 speed is unknown, defaulting to 1000 [ 466.383553][T12383] bridge0: port 3(batadv_slave_0) entered disabled state [ 466.404515][T12383] team0: left allmulticast mode [ 466.409628][T12383] team_slave_1: left allmulticast mode [ 466.419326][T12383] team0: left promiscuous mode [ 466.424349][T12383] team_slave_1: left promiscuous mode [ 466.430313][T12383] hsr_slave_0: left promiscuous mode [ 466.441520][T12383] bridge0: port 2(team0) entered disabled state [ 466.460995][T12383] bridge_slave_0: left allmulticast mode [ 466.473613][T12383] bridge_slave_0: left promiscuous mode [ 466.479601][T12383] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.523574][T12383] bond0: (slave bridge0): Releasing backup interface [ 466.952026][T12395] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1676'. [ 468.056448][T12403] netlink: 'syz.2.1671': attribute type 2 has an invalid length. [ 468.065024][T12403] netlink: 'syz.2.1671': attribute type 11 has an invalid length. [ 468.081882][T12403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1671'. [ 468.108171][T12402] ±ÿ: renamed from lo (while UP) [ 468.249301][T12412] netlink: 'syz.1.1673': attribute type 9 has an invalid length. [ 468.258365][T12412] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1673'. [ 468.832540][T12421] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 469.225752][T12421] veth1_macvtap (unregistering): left allmulticast mode [ 470.167324][T12454] netlink: 'syz.2.1683': attribute type 153 has an invalid length. [ 470.212387][T12454] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1683'. [ 470.420371][T12463] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 472.801789][T12463] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 472.825359][T12465] netlink: 'syz.1.1684': attribute type 29 has an invalid length. [ 473.056575][T12475] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1693'. [ 473.139483][T12472] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.370688][T12487] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 473.417819][T12487] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1689'. [ 473.470896][T12487] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 474.217388][T12507] netlink: 'syz.0.1695': attribute type 3 has an invalid length. [ 474.239939][T12507] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1695'. [ 474.343859][T12507] netlink: 'syz.0.1695': attribute type 10 has an invalid length. [ 474.367164][T12507] netlink: 'syz.0.1695': attribute type 16 has an invalid length. [ 474.385513][T12507] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1695'. [ 474.413780][T12506] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1694'. [ 475.374734][T12524] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1699'. [ 475.475002][T12524] netlink: 'syz.2.1699': attribute type 2 has an invalid length. [ 475.489581][T12524] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.1699'. [ 475.660650][T12534] pimreg: tun_chr_ioctl cmd 1074025677 [ 475.691945][T12534] pimreg: linktype set to 774 [ 480.510681][T12582] netlink: 'syz.3.1715': attribute type 3 has an invalid length. [ 480.518807][T12582] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1715'. [ 480.628465][T12574] netlink: 'syz.1.1713': attribute type 25 has an invalid length. [ 480.640355][T12574] netlink: 'syz.1.1713': attribute type 5 has an invalid length. [ 480.672778][T12574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1713'. [ 480.688234][T12575] netlink: 'syz.1.1713': attribute type 25 has an invalid length. [ 480.711838][T12575] netlink: 'syz.1.1713': attribute type 5 has an invalid length. [ 480.719632][T12575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1713'. [ 480.943361][T12571] rxe_eth0 speed is unknown, defaulting to 1000 [ 481.434703][T12598] netlink: 'syz.1.1719': attribute type 2 has an invalid length. [ 481.471847][T12598] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1719'. [ 481.533393][T12597] netlink: 'syz.1.1719': attribute type 2 has an invalid length. [ 481.577810][T12597] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1719'. [ 482.696642][T12606] rxe_eth0 speed is unknown, defaulting to 1000 [ 483.506402][T12629] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1727'. [ 483.901827][T12636] tap0: tun_chr_ioctl cmd 1074025676 [ 483.936794][T12636] tap0: owner set to 776 [ 485.588594][T12650] netlink: 'syz.3.1732': attribute type 3 has an invalid length. [ 485.598988][T12650] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1732'. [ 486.415636][T12675] netlink: zone id is out of range [ 486.449520][T12675] netlink: set zone limit has 8 unknown bytes [ 487.216748][T12685] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1739'. [ 488.206920][T12701] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1741'. [ 488.252817][ T6337] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 488.380269][T12705] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1742'. [ 491.056403][T12711] rxe_eth0 speed is unknown, defaulting to 1000 [ 491.863177][T12734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.870538][T12734] IPv6: NLM_F_CREATE should be set when creating new route [ 491.877987][T12734] IPv6: NLM_F_CREATE should be set when creating new route [ 491.885322][T12734] IPv6: NLM_F_CREATE should be set when creating new route [ 492.297128][T12737] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1752'. [ 493.350448][T12744] mac80211_hwsim hwsim8 .3ãc¤±: renamed from wlan1 (while UP) [ 494.744166][T12757] sit0: entered promiscuous mode [ 498.459885][T12792] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 498.699015][T12797] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 498.717839][T12797] batadv_slave_0: left promiscuous mode [ 498.726940][T12797] batadv_slave_0: left allmulticast mode [ 498.757487][T12797] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 499.333692][T12807] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1771'. [ 499.387801][T12807] bond0: (slave bond_slave_0): Releasing backup interface [ 499.443982][T12807] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 500.295321][T12841] netlink: 'syz.0.1782': attribute type 22 has an invalid length. [ 500.325798][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'. [ 500.576199][T12847] mac80211_hwsim hwsim5 .3ãc¤±: renamed from wlan1 (while UP) [ 501.218306][T12844] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.560736][T12860] netlink: 'syz.0.1786': attribute type 2 has an invalid length. [ 501.569307][T12860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1786'. [ 501.594926][T12861] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1785'. [ 501.688010][T12861] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1785'. [ 501.720386][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.739816][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.857967][T12866] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1787'. [ 501.930372][T12866] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1787'. [ 502.190206][T12869] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 502.201815][T12869] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 502.219353][T12869] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 502.240529][T12869] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 502.267724][T12871] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 502.293596][T12870] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 502.304228][T12872] netlink: 'syz.3.1790': attribute type 29 has an invalid length. [ 502.680887][T12883] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1793'. [ 502.701322][T12883] netlink: zone id is out of range [ 502.706589][T12883] netlink: zone id is out of range [ 502.716472][T12883] netlink: zone id is out of range [ 502.722037][T12883] netlink: zone id is out of range [ 502.727568][T12883] netlink: zone id is out of range [ 502.733012][T12883] netlink: zone id is out of range [ 502.740691][T12883] netlink: zone id is out of range [ 502.750322][T12883] netlink: zone id is out of range [ 502.758118][T12883] netlink: zone id is out of range [ 503.019348][T12879] geneve1: entered promiscuous mode [ 503.028232][T12879] geneve1: entered allmulticast mode [ 503.062011][T12879] team0: Port device geneve1 added [ 504.060727][T12912] validate_nla: 2 callbacks suppressed [ 504.060750][T12912] netlink: 'syz.2.1800': attribute type 3 has an invalid length. [ 504.074927][T12912] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1800'. [ 504.158056][T12912] netlink: 'syz.2.1800': attribute type 12 has an invalid length. [ 504.185499][T12912] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1800'. [ 504.307935][T12916] netlink: 'syz.2.1800': attribute type 4 has an invalid length. [ 504.516840][T12925] netlink: 'syz.2.1807': attribute type 1 has an invalid length. [ 504.838630][T12929] netlink: 'syz.0.1806': attribute type 8 has an invalid length. [ 504.851290][T12929] __nla_validate_parse: 1 callbacks suppressed [ 504.851307][T12929] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1806'. [ 505.039467][T12935] syzkaller0: entered promiscuous mode [ 505.047016][T12935] syzkaller0: entered allmulticast mode [ 505.268391][T12947] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 505.286400][T12947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1808'. [ 505.297295][T12949] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1809'. [ 505.632889][T12955] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1811'. [ 505.651262][T12955] net_ratelimit: 334 callbacks suppressed [ 505.651280][T12955] netlink: get zone limit has 4 unknown bytes [ 505.974499][T12960] syzkaller0: entered allmulticast mode [ 506.552172][T12978] rxe_eth0 speed is unknown, defaulting to 1000 [ 506.852549][T12995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.886822][T12995] netlink: 'syz.3.1824': attribute type 9 has an invalid length. [ 506.902575][T12995] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1824'. [ 506.966765][T12997] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1825'. [ 507.164132][T12999] netlink: 'syz.3.1824': attribute type 9 has an invalid length. [ 507.199421][T12999] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1824'. [ 508.398934][T13030] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 508.980069][T13030] gre0: entered promiscuous mode [ 509.051422][T13030] gre0: entered allmulticast mode [ 509.056546][T13030] team0: Device gre0 is of different type [ 509.192663][T13032] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 509.286149][T13032] team0: Device gre0 is of different type [ 510.018891][T13052] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.587810][T13070] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1840'. [ 512.892817][T13094] netlink: 'syz.1.1845': attribute type 10 has an invalid length. [ 514.314457][T13110] netlink: 'syz.3.1850': attribute type 9 has an invalid length. [ 514.330253][T13110] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1850'. [ 514.615673][T13118] netlink: 'syz.2.1853': attribute type 21 has an invalid length. [ 515.837806][T13146] netlink: 'syz.2.1860': attribute type 27 has an invalid length. [ 515.886199][T13151] netlink: 'syz.0.1859': attribute type 2 has an invalid length. [ 515.896204][T13146] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1860'. [ 515.914155][T13151] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1859'. [ 515.944250][T13150] netlink: 'syz.0.1859': attribute type 2 has an invalid length. [ 515.973921][T13150] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1859'. [ 516.257354][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1869'. [ 517.998777][T13211] netlink: 'syz.0.1864': attribute type 3 has an invalid length. [ 518.051055][T13211] netlink: 111100 bytes leftover after parsing attributes in process `syz.0.1864'. [ 518.524382][T13223] netlink: 'syz.0.1867': attribute type 4 has an invalid length. [ 518.541402][T13223] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1867'. [ 520.241591][ T6339] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.504845][T13238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1873'. [ 522.508549][T13237] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1874'. [ 524.267335][T13274] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1882'. [ 524.469748][T13288] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1888'. [ 524.583542][T13286] netlink: 'syz.2.1887': attribute type 10 has an invalid length. [ 524.789015][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 525.201945][T13311] netlink: 'syz.2.1895': attribute type 10 has an invalid length. [ 525.411687][T13311] veth1_macvtap (unregistering): left allmulticast mode [ 526.287614][T13336] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1902'. [ 526.491489][T13340] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1904'. [ 526.755013][T13348] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 526.791594][T13348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1907'. [ 526.852450][T13348] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 528.059889][T13375] netlink: 'syz.2.1915': attribute type 2 has an invalid length. [ 528.068713][T13374] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1915'. [ 528.498245][T13388] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1919'. [ 528.627979][T13395] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1920'. [ 529.051487][T13407] netlink: 'syz.0.1921': attribute type 9 has an invalid length. [ 529.079739][T13407] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1921'. [ 531.581769][T13405] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1920'. [ 532.751017][T13453] netlink: 'syz.0.1930': attribute type 21 has an invalid length. [ 532.802946][T13455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.816619][T13455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.845472][T13455] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 532.862656][T13455] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 532.884668][T13455] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 532.901423][T13455] batman_adv: batadv0: Removing interface: virt_wifi0 [ 533.038817][T13460] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1934'. [ 533.986280][T13487] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1942'. [ 534.563925][T13502] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1945'. [ 534.868335][T13509] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.1949'. [ 534.879323][T13509] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1949'. [ 534.933694][T13513] netlink: 'syz.3.1949': attribute type 3 has an invalid length. [ 534.941876][T13513] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1949'. [ 534.982252][T13509] lo: entered allmulticast mode [ 535.035593][T13513] lo: entered promiscuous mode [ 535.040636][T13513] lo: left allmulticast mode [ 535.393438][T13527] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.1954'. [ 535.876454][T13541] netlink: 'syz.3.1956': attribute type 6 has an invalid length. [ 535.892859][T13542] netlink: 'syz.3.1956': attribute type 6 has an invalid length. [ 536.395095][T13546] lo: entered allmulticast mode [ 536.580231][T13554] netlink: 'syz.2.1960': attribute type 29 has an invalid length. [ 536.588840][T13554] netlink: 'syz.2.1960': attribute type 29 has an invalid length. [ 536.602438][T13554] netlink: 'syz.2.1960': attribute type 29 has an invalid length. [ 536.611508][T13554] netlink: 'syz.2.1960': attribute type 29 has an invalid length. [ 536.620084][T13554] netlink: 'syz.2.1960': attribute type 29 has an invalid length. [ 536.709936][T13561] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1962'. [ 536.863245][T13565] netlink: 'syz.2.1963': attribute type 10 has an invalid length. [ 536.897799][T13565] team0: Port device netdevsim0 added [ 536.934043][T13566] team0: Port device netdevsim0 removed [ 536.950629][T13566] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 537.967685][T13605] validate_nla: 1 callbacks suppressed [ 537.967704][T13605] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 538.021313][T13605] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1973'. [ 538.041020][T13608] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 538.099596][T13608] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1973'. [ 538.820485][T13616] syzkaller0: entered promiscuous mode [ 538.841685][T13616] syzkaller0: entered allmulticast mode [ 539.463012][T13629] delete_channel: no stack [ 541.455160][T13653] netlink: 'syz.0.1986': attribute type 4 has an invalid length. [ 541.467355][T13653] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1986'. [ 541.607970][T13657] netlink: 'syz.2.1987': attribute type 21 has an invalid length. [ 541.623923][T13657] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.646874][T13657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.654220][T13657] IPv6: NLM_F_CREATE should be set when creating new route [ 541.661528][T13657] IPv6: NLM_F_CREATE should be set when creating new route [ 541.668808][T13657] IPv6: NLM_F_CREATE should be set when creating new route [ 541.714977][T13665] netlink: 'syz.3.1989': attribute type 10 has an invalid length. [ 542.324314][T13677] delete_channel: no stack [ 542.351691][T13677] delete_channel: no stack [ 542.400192][T13677] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 543.449360][T13706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2003'. [ 543.471361][T13706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2003'. [ 543.481737][T13705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2003'. [ 543.501591][T13706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2003'. [ 543.904884][T13722] netlink: 'syz.2.2007': attribute type 29 has an invalid length. [ 543.954112][T13722] netlink: 'syz.2.2007': attribute type 29 has an invalid length. [ 543.984532][T13729] netlink: 'syz.2.2007': attribute type 29 has an invalid length. [ 544.205455][T13736] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2010'. [ 544.762503][T13762] sit0: left promiscuous mode [ 545.387269][T13776] ÿÿÿÿÿÿ: renamed from vlan1 [ 545.619061][T13780] netlink: 'syz.0.2023': attribute type 6 has an invalid length. [ 545.643702][T13780] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2023'. [ 545.714526][T13780] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2023'. [ 546.698682][T13807] netlink: 'syz.1.2031': attribute type 8 has an invalid length. [ 551.162499][T13860] netlink: 'syz.0.2049': attribute type 10 has an invalid length. [ 551.180721][T13860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2049'. [ 551.204747][T13860] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 551.239809][T13862] syzkaller0: entered promiscuous mode [ 551.259826][T13862] syzkaller0: entered allmulticast mode [ 551.457151][T13872] netlink: 'syz.1.2052': attribute type 29 has an invalid length. [ 551.470411][T13872] netlink: 'syz.1.2052': attribute type 29 has an invalid length. [ 551.484357][T13871] netlink: 'syz.1.2052': attribute type 29 has an invalid length. [ 551.603558][ T6339] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 553.981068][T13871] netlink: 'syz.1.2052': attribute type 29 has an invalid length. [ 553.991053][T13878] netlink: 'syz.1.2052': attribute type 10 has an invalid length. [ 553.999182][T13877] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2054'. [ 554.021389][T13884] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2052'. [ 554.176874][T13898] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.2057'. [ 554.213171][T13897] delete_channel: no stack [ 554.774130][T13919] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2060'. [ 554.893325][T13929] syzkaller0: entered promiscuous mode [ 554.907344][T13929] syzkaller0: entered allmulticast mode [ 555.257488][T13944] rxe_eth0 speed is unknown, defaulting to 1000 [ 555.269049][T13949] netlink: 'syz.1.2068': attribute type 10 has an invalid length. [ 555.617440][T13953] netlink: 'syz.3.2071': attribute type 9 has an invalid length. [ 555.625580][T13953] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.2071'. [ 555.639398][T13953] syz.3.2071[13953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.639882][T13953] syz.3.2071[13953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.909474][T13980] rxe_eth0 speed is unknown, defaulting to 1000 [ 559.078751][T13988] netlink: 'syz.2.2080': attribute type 3 has an invalid length. [ 559.111184][T13988] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2080'. [ 559.143805][T13988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 559.789366][T14000] netlink: 'syz.0.2083': attribute type 10 has an invalid length. [ 559.905605][T14000] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 560.099646][T14003] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 560.112486][T14003] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2085'. [ 560.122761][T14003] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2085'. [ 561.625944][T14041] syzkaller0: entered promiscuous mode [ 561.634008][T14041] syzkaller0: entered allmulticast mode [ 561.751808][T14043] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 561.779585][T14043] syzkaller0: entered promiscuous mode [ 561.787734][T14043] syzkaller0: entered allmulticast mode [ 563.139038][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.145928][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.740643][T14077] sctp: [Deprecated]: syz.1.2106 (pid 14077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.740643][T14077] Use struct sctp_sack_info instead [ 566.009790][T14110] netlink: 'syz.1.2114': attribute type 21 has an invalid length. [ 566.017989][T14110] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2114'. [ 566.089914][T14114] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2115'. [ 566.746636][T14148] netlink: 'syz.0.2125': attribute type 9 has an invalid length. [ 566.792523][T14148] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2125'. [ 566.944625][T14153] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2127'. [ 567.057374][T14153] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2127'. [ 567.077763][T14157] netlink: 'syz.2.2128': attribute type 15 has an invalid length. [ 567.097615][T14157] netlink: 'syz.2.2128': attribute type 7 has an invalid length. [ 567.109235][T14157] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2128'. [ 567.476491][T14170] netlink: 'syz.2.2134': attribute type 9 has an invalid length. [ 567.485531][T14170] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2134'. [ 567.552084][T14174] netlink: 'syz.2.2134': attribute type 9 has an invalid length. [ 567.564954][T14174] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2134'. [ 568.456648][T14198] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2145'. [ 568.597149][T14205] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2144'. [ 568.810810][T14210] netlink: 'syz.3.2148': attribute type 2 has an invalid length. [ 568.835804][T14211] netlink: 'syz.0.2147': attribute type 2 has an invalid length. [ 568.962249][T14213] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 570.276711][T14239] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 570.287574][T14239] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 571.490496][T14268] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 571.498925][T14268] __nla_validate_parse: 10 callbacks suppressed [ 571.498942][T14268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2164'. [ 571.523953][T14268] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 571.538331][T14268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2164'. [ 571.551284][T14269] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 571.559452][T14269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2164'. [ 571.595240][T14267] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2165'. [ 572.240114][T14277] netlink: 'syz.0.2167': attribute type 21 has an invalid length. [ 572.488939][T14283] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2169'. [ 572.499587][T14283] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2169'. [ 572.511440][T14283] : (slave bond_slave_0): Releasing backup interface [ 572.531059][T14283] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 573.084121][T14296] netlink: 279 bytes leftover after parsing attributes in process `syz.2.2172'. [ 573.146835][T14297] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2172'. [ 573.832965][T14313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.865092][T14313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.881894][T14313] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.903860][T14313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.921534][T14313] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 573.933704][T14313] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.986672][T14312] rxe_eth0 speed is unknown, defaulting to 1000 [ 574.162401][T14326] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 574.327198][T14326] bond0: (slave netdevsim0): Releasing backup interface [ 574.346038][T14326] team0: Port device netdevsim0 added [ 574.427711][T14327] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 574.456297][T14327] team0: Port device netdevsim0 removed [ 574.468989][T14327] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 574.705680][T14332] netlink: 'syz.0.2181': attribute type 4 has an invalid length. [ 574.727085][T14332] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2181'. [ 574.760800][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.937567][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.080213][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.368860][ T11] : (slave ÿÿÿÿÿÿ): Releasing backup interface [ 575.386873][ T11] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.539888][T14312] chnl_net:caif_netlink_parms(): no params data found [ 576.004731][T14313] Bluetooth: hci4: command tx timeout [ 576.254113][T14380] C: renamed from team_slave_0 [ 576.337931][T14380] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 576.400654][T14380] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2193'. [ 576.414513][T14380] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 576.437110][T14376] -1: renamed from syzkaller0 [ 576.715022][T14312] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.731312][T14312] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.749014][T14312] bridge_slave_0: entered allmulticast mode [ 576.770028][T14312] bridge_slave_0: entered promiscuous mode [ 576.791273][T14364] rxe_eth0 speed is unknown, defaulting to 1000 [ 576.797924][T14312] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.819458][T14312] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.839841][T14312] bridge_slave_1: entered allmulticast mode [ 576.860113][T14312] bridge_slave_1: entered promiscuous mode [ 577.150739][T14394] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2194'. [ 577.320626][T14312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.354286][T14312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.677865][T14312] team0: Port device team_slave_0 added [ 577.686096][T14408] delete_channel: no stack [ 577.718579][T14312] team0: Port device team_slave_1 added [ 577.876530][T14312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.893874][T14312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.923753][T14312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.938939][T14312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.948797][T14312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.979146][T14312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.081689][T14313] Bluetooth: hci4: command tx timeout [ 578.348014][T14312] hsr_slave_0: entered promiscuous mode [ 578.391713][T14312] hsr_slave_1: entered promiscuous mode [ 578.428837][T14312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.456870][T14312] Cannot create hsr debugfs directory [ 579.145884][T14443] netlink: 'syz.0.2202': attribute type 39 has an invalid length. [ 579.619457][T14443] hsr_slave_1 (unregistering): left promiscuous mode [ 580.161481][T14313] Bluetooth: hci4: command tx timeout [ 580.204202][T14455] pim6reg1: entered promiscuous mode [ 580.209583][T14455] pim6reg1: entered allmulticast mode [ 581.331442][T14485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2210'. [ 581.570481][T14312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 581.635486][T14487] netlink: 'syz.0.2211': attribute type 5 has an invalid length. [ 581.656847][T14312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 581.754477][ T11] hsr_slave_0: left promiscuous mode [ 581.783006][ T11] hsr_slave_1: left promiscuous mode [ 581.806324][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.821259][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.853932][ T11] bridge0: port 3(batadv_slave_0) entered disabled state [ 581.887570][ T11] bridge0: port 2(team0) entered disabled state [ 581.906463][ T11] bridge_slave_0: left promiscuous mode [ 581.941380][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.025102][ T11] veth0_vlan: left promiscuous mode [ 582.249280][T14313] Bluetooth: hci4: command tx timeout [ 582.492344][ T11] geneve1 (unregistering): left promiscuous mode [ 582.499648][ T11] geneve1 (unregistering): left allmulticast mode [ 582.519088][ T11] team0 (unregistering): Port device geneve1 removed [ 583.215542][ T11] team_slave_1 (unregistering): left promiscuous mode [ 583.224212][ T11] team_slave_1 (unregistering): left allmulticast mode [ 583.237849][ T11] team0 (unregistering): Port device team_slave_1 removed [ 583.303640][ T11] team_slave_0 (unregistering): left promiscuous mode [ 583.310621][ T11] team_slave_0 (unregistering): left allmulticast mode [ 583.320380][ T11] team0 (unregistering): Port device team_slave_0 removed [ 583.384710][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.501634][ T11]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 583.608952][ T6350] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.796357][ T11]  (unregistering): Released all slaves [ 583.858444][T14312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 583.869821][T14312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 583.882146][T14504] netlink: 'syz.0.2215': attribute type 21 has an invalid length. [ 584.250047][T14312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.330777][T14312] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.435080][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.442362][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.493418][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.500674][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.209224][T14538] netlink: 'syz.1.2220': attribute type 29 has an invalid length. [ 585.244159][T14312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.259748][T14538] netlink: 'syz.1.2220': attribute type 29 has an invalid length. [ 585.332104][T14541] netlink: 'syz.1.2220': attribute type 29 has an invalid length. [ 585.361690][T14538] netlink: 'syz.1.2220': attribute type 29 has an invalid length. [ 585.415210][T14538] netlink: 'syz.1.2220': attribute type 29 has an invalid length. [ 585.510114][T14312] veth0_vlan: entered promiscuous mode [ 585.562427][T14312] veth1_vlan: entered promiscuous mode [ 585.717075][T14312] veth0_macvtap: entered promiscuous mode [ 585.740085][T14312] veth1_macvtap: entered promiscuous mode [ 585.803824][T14312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.839286][T14312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.868353][T14312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.893894][T14312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.928524][T14312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.947786][T14312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.968180][T14312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.977528][T14312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.515827][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.553758][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.692891][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.700801][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.959705][T14613] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2237'. [ 588.001912][T14613] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 588.204287][T14605] netlink: 'syz.3.2234': attribute type 9 has an invalid length. [ 588.216791][T14605] netlink: 149864 bytes leftover after parsing attributes in process `syz.3.2234'. [ 588.319293][T14622] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2238'. [ 588.331756][T14622] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2238'. [ 589.939630][T14685] netlink: 'syz.1.2251': attribute type 9 has an invalid length. [ 589.954970][T14685] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2251'. [ 591.433195][T14690] rxe_eth0 speed is unknown, defaulting to 1000 [ 591.566164][T14686] netlink: 'syz.1.2251': attribute type 9 has an invalid length. [ 591.592611][T14686] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2251'. [ 591.716269][T14705] netlink: 'syz.0.2254': attribute type 21 has an invalid length. [ 592.426887][T14714] syzkaller0: entered allmulticast mode [ 592.677142][T14727] tc_dump_action: action bad kind [ 593.148826][T14746] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.2261'. [ 593.176615][T14746] netlink: 'syz.0.2261': attribute type 30 has an invalid length. [ 594.255269][T14770] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2266'. [ 594.307633][T14770] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2266'. [ 594.342981][T14770] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2266'. [ 594.362892][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2266'. [ 596.016208][T14802] netlink: 'syz.0.2274': attribute type 4 has an invalid length. [ 596.031634][T14802] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2274'. [ 596.783434][T14818] netlink: 'syz.0.2280': attribute type 3 has an invalid length. [ 596.793185][T14818] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 596.824993][T14818] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2280'. [ 596.865200][T14823] netlink: 'syz.0.2280': attribute type 3 has an invalid length. [ 596.921304][T14823] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 596.931979][T14823] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2280'. [ 597.327941][T14826] rxe_eth0 speed is unknown, defaulting to 1000 [ 597.375736][T14839] netlink: 'syz.0.2283': attribute type 21 has an invalid length. [ 597.391436][T14839] netlink: 'syz.0.2283': attribute type 1 has an invalid length. [ 597.411358][T14839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2283'. [ 597.981259][T14846] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2284'. [ 599.316915][T14874] netlink: 'syz.3.2289': attribute type 39 has an invalid length. [ 599.849470][T14886] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 599.879553][T14886] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 599.913641][T14887] netlink: 'syz.0.2291': attribute type 29 has an invalid length. [ 599.968184][T14889] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2291'. [ 601.842855][T14898] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 601.849988][T14898] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 604.878184][T14949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2308'. [ 604.976144][T14949] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2308'. [ 604.995155][T14949] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 605.215098][T14951] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2309'. [ 607.450188][T14978] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 607.462333][T14978] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 607.531404][T14979] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 607.574649][T14979] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 610.024140][T14985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2320'. [ 610.651541][T15017] validate_nla: 2 callbacks suppressed [ 610.651562][T15017] netlink: 'syz.3.2327': attribute type 2 has an invalid length. [ 610.709066][T15017] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2327'. [ 612.299315][T15046] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2332'. [ 612.384775][T15046] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2332'. [ 612.467641][T15050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2332'. [ 612.499521][T15041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2332'. [ 613.285717][T15056] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2333'. [ 613.295957][T15053] rxe_eth0 speed is unknown, defaulting to 1000 [ 613.615154][T15062] syzkaller0: entered promiscuous mode [ 613.620707][T15062] syzkaller0: entered allmulticast mode [ 613.702100][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 614.467786][T15070] netlink: 209280 bytes leftover after parsing attributes in process `syz.0.2338'. [ 614.510718][T15070] openvswitch: netlink: Flow key attr not present in new flow. [ 615.602665][ T11] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 616.748580][T14837] syz.2.2281 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 616.814646][T14837] CPU: 1 PID: 14837 Comm: syz.2.2281 Not tainted syzkaller #0 [ 616.822766][T14837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 616.832988][T14837] Call Trace: [ 616.836343][T14837] [ 616.839331][T14837] dump_stack_lvl+0x18c/0x250 [ 616.844110][T14837] ? show_regs_print_info+0x20/0x20 [ 616.849398][T14837] ? load_image+0x420/0x420 [ 616.853933][T14837] ? ___ratelimit+0x478/0x610 [ 616.858749][T14837] ? radix_tree_cpu_dead+0x160/0x160 [ 616.864088][T14837] dump_header+0xd8/0x820 [ 616.868489][T14837] oom_kill_process+0x390/0x580 [ 616.873368][T14837] out_of_memory+0xe0e/0x1200 [ 616.878074][T14837] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 616.883787][T14837] ? mutex_lock_nested+0x20/0x20 [ 616.888748][T14837] ? unregister_oom_notifier+0x20/0x20 [ 616.894260][T14837] mem_cgroup_out_of_memory+0x2c2/0x390 [ 616.899872][T14837] ? try_charge_memcg+0xc91/0x17c0 [ 616.905043][T14837] ? drain_local_stock+0x630/0x630 [ 616.910222][T14837] ? do_raw_spin_unlock+0x121/0x230 [ 616.915462][T14837] try_charge_memcg+0xca1/0x17c0 [ 616.920454][T14837] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 616.926309][T14837] ? folio_flags+0x120/0x120 [ 616.930935][T14837] ? shmem_alloc_folio+0x1f4/0x2a0 [ 616.936103][T14837] ? percpu_ref_tryget+0x15/0x180 [ 616.941175][T14837] ? get_mem_cgroup_from_mm+0x38/0x290 [ 616.946684][T14837] charge_memcg+0x11b/0x3b0 [ 616.951256][T14837] ? __mem_cgroup_charge+0x80/0x80 [ 616.956401][T14837] ? get_mem_cgroup_from_mm+0x38/0x290 [ 616.961890][T14837] ? get_mem_cgroup_from_mm+0x38/0x290 [ 616.967384][T14837] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 616.973077][T14837] __mem_cgroup_charge+0x25/0x80 [ 616.978063][T14837] shmem_add_to_page_cache+0x8d3/0x1b80 [ 616.983651][T14837] ? xas_load+0x12b/0x140 [ 616.988135][T14837] ? shmem_alloc_folio+0x2a0/0x2a0 [ 616.993296][T14837] shmem_get_folio_gfp+0x1037/0x2b40 [ 616.998669][T14837] shmem_write_begin+0xf2/0x430 [ 617.003566][T14837] generic_perform_write+0x2fe/0x5c0 [ 617.008898][T14837] ? generic_file_direct_write+0x3e0/0x3e0 [ 617.014737][T14837] ? down_write+0x16e/0x200 [ 617.019280][T14837] ? file_update_time+0x98/0x1a0 [ 617.024264][T14837] shmem_file_write_iter+0xfb/0x120 [ 617.029521][T14837] __kernel_write_iter+0x29f/0x6d0 [ 617.034695][T14837] ? vfs_read+0x990/0x990 [ 617.039075][T14837] ? get_dump_page+0x156/0x200 [ 617.043889][T14837] ? __asan_memset+0x22/0x40 [ 617.048530][T14837] ? iov_iter_bvec+0xd4/0x1b0 [ 617.053259][T14837] dump_user_range+0x418/0x840 [ 617.058064][T14837] ? dump_skip+0x40/0x40 [ 617.062340][T14837] ? dump_emit+0x78/0xe0 [ 617.066626][T14837] ? dump_emit+0xa6/0xe0 [ 617.070899][T14837] ? elf_core_dump+0x2dbb/0x37c0 [ 617.075891][T14837] elf_core_dump+0x320e/0x37c0 [ 617.080712][T14837] ? load_elf_binary+0x2850/0x2850 [ 617.085866][T14837] ? verify_lock_unused+0x140/0x140 [ 617.091099][T14837] ? __lock_acquire+0x7eb0/0x7eb0 [ 617.096169][T14837] ? mas_next_slot+0x94c/0x980 [ 617.101009][T14837] ? rcu_read_lock_any_held+0xb4/0x140 [ 617.106524][T14837] ? 0xffffffffff600000 [ 617.110711][T14837] ? do_raw_spin_unlock+0x121/0x230 [ 617.115954][T14837] do_coredump+0x1791/0x24a0 [ 617.120588][T14837] ? nfs_stat_to_errno+0x170/0x170 [ 617.125746][T14837] ? lock_chain_count+0x20/0x20 [ 617.130630][T14837] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.135858][T14837] ? lockdep_hardirqs_on+0x98/0x150 [ 617.141096][T14837] get_signal+0x10da/0x1390 [ 617.145657][T14837] arch_do_signal_or_restart+0xc2/0x7b0 [ 617.151246][T14837] ? get_sigframe_size+0x20/0x20 [ 617.156230][T14837] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 617.162258][T14837] ? exit_to_user_mode_loop+0x3b/0x110 [ 617.167787][T14837] exit_to_user_mode_loop+0x70/0x110 [ 617.173402][T14837] exit_to_user_mode_prepare+0xee/0x180 [ 617.179039][T14837] irqentry_exit_to_user_mode+0x9/0x30 [ 617.184556][T14837] exc_page_fault+0x8c/0x100 [ 617.189193][T14837] asm_exc_page_fault+0x26/0x30 [ 617.194088][T14837] RIP: 0033:0x7f9e2299e561 [ 617.198534][T14837] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 617.218262][T14837] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 617.224358][T14837] RAX: 0000000000000000 RBX: 00007f9e22c25fa0 RCX: 00007f9e2299e559 [ 617.232357][T14837] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 617.240371][T14837] RBP: 00007f9e22a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 617.248370][T14837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 617.256385][T14837] R13: 00007f9e22c26038 R14: 00007f9e22c25fa0 R15: 00007ffc5eb9f788 [ 617.264665][T14837] [ 617.279521][T14837] memory: usage 307200kB, limit 307200kB, failcnt 20811 [ 617.294100][T14837] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 617.310335][T14837] kmem: usage 14344kB, limit 9007199254740988kB, failcnt 0 [ 617.317810][T14837] Memory cgroup stats for /syz2: [ 617.325750][T14837] cache 298938368 [ 617.336642][T14837] rss 946176 [ 617.339915][T14837] rss_huge 0 [ 617.343198][T14837] shmem 298926080 [ 617.347050][T14837] mapped_file 12288 [ 617.350907][T14837] dirty 12288 [ 617.356576][T14837] writeback 0 [ 617.359933][T14837] workingset_refault_anon 0 [ 617.364548][T14837] workingset_refault_file 0 [ 617.369094][T14837] swap 127995904 [ 617.377247][T14837] pgpgin 550037 [ 617.380765][T14837] pgpgout 476823 [ 617.385372][T14837] pgfault 113586 [ 617.389063][T14837] pgmajfault 6 [ 617.393638][T14837] inactive_anon 135393280 [ 617.398033][T14837] active_anon 164478976 [ 617.402848][T14837] inactive_file 12288 [ 617.406890][T14837] active_file 0 [ 617.410583][T14837] unevictable 0 [ 617.414921][T14837] hierarchical_memory_limit 314572800 [ 617.420380][T14837] hierarchical_memsw_limit 9223372036854771712 [ 617.432961][T14837] total_cache 298938368 [ 617.437217][T14837] total_rss 946176 [ 617.440982][T14837] total_rss_huge 0 [ 617.445044][T14837] total_shmem 298926080 [ 617.449705][T14837] total_mapped_file 12288 [ 617.454339][T14837] total_dirty 12288 [ 617.460598][T14837] total_writeback 0 [ 617.464590][T14837] total_workingset_refault_anon 0 [ 617.469667][T14837] total_workingset_refault_file 0 [ 617.477250][T14837] total_swap 127995904 [ 617.481533][T14837] total_pgpgin 550061 [ 617.486600][T14837] total_pgpgout 476847 [ 617.490827][T14837] total_pgfault 113629 [ 617.495313][T14837] total_pgmajfault 6 [ 617.499269][T14837] total_inactive_anon 135393280 [ 617.508677][T14837] total_active_anon 164478976 [ 617.515534][T14837] total_inactive_file 12288 [ 617.520110][T14837] total_active_file 0 [ 617.525416][T14837] total_unevictable 0 [ 617.529466][T14837] anon_cost 0 [ 617.534297][T14837] file_cost 0 [ 617.537779][T14837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2281,pid=14873,uid=0 [ 617.555374][T14837] Memory cgroup out of memory: Killed process 14873 (syz.2.2281) total-vm:98948kB, anon-rss:1412kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 617.792956][T14831] syz.2.2281 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 617.814248][T14831] CPU: 0 PID: 14831 Comm: syz.2.2281 Not tainted syzkaller #0 [ 617.821798][T14831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 617.831903][T14831] Call Trace: [ 617.835208][T14831] [ 617.838173][T14831] dump_stack_lvl+0x18c/0x250 [ 617.842894][T14831] ? show_regs_print_info+0x20/0x20 [ 617.848123][T14831] ? load_image+0x420/0x420 [ 617.852667][T14831] ? ___ratelimit+0x478/0x610 [ 617.857419][T14831] ? radix_tree_cpu_dead+0x160/0x160 [ 617.862770][T14831] dump_header+0xd8/0x820 [ 617.867168][T14831] oom_kill_process+0x390/0x580 [ 617.872061][T14831] out_of_memory+0xe0e/0x1200 [ 617.876778][T14831] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 617.882477][T14831] ? mutex_lock_nested+0x20/0x20 [ 617.887456][T14831] ? unregister_oom_notifier+0x20/0x20 [ 617.892968][T14831] mem_cgroup_out_of_memory+0x2c2/0x390 [ 617.898547][T14831] ? try_charge_memcg+0xc91/0x17c0 [ 617.903692][T14831] ? drain_local_stock+0x630/0x630 [ 617.908854][T14831] ? do_raw_spin_unlock+0x121/0x230 [ 617.914095][T14831] try_charge_memcg+0xca1/0x17c0 [ 617.919084][T14831] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 617.924959][T14831] ? folio_flags+0x120/0x120 [ 617.929586][T14831] ? shmem_alloc_folio+0x1f4/0x2a0 [ 617.934742][T14831] ? percpu_ref_tryget+0x15/0x180 [ 617.939807][T14831] ? get_mem_cgroup_from_mm+0x38/0x290 [ 617.945304][T14831] charge_memcg+0x11b/0x3b0 [ 617.949848][T14831] ? __mem_cgroup_charge+0x80/0x80 [ 617.955024][T14831] ? get_mem_cgroup_from_mm+0x38/0x290 [ 617.960517][T14831] ? get_mem_cgroup_from_mm+0x38/0x290 [ 617.966009][T14831] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 617.971594][T14831] __mem_cgroup_charge+0x25/0x80 [ 617.976565][T14831] shmem_add_to_page_cache+0x8d3/0x1b80 [ 617.982172][T14831] ? xas_load+0x12b/0x140 [ 617.986552][T14831] ? shmem_alloc_folio+0x2a0/0x2a0 [ 617.991719][T14831] shmem_get_folio_gfp+0x1037/0x2b40 [ 617.997085][T14831] shmem_write_begin+0xf2/0x430 [ 618.001983][T14831] generic_perform_write+0x2fe/0x5c0 [ 618.007318][T14831] ? generic_file_direct_write+0x3e0/0x3e0 [ 618.013165][T14831] ? down_write+0x16e/0x200 [ 618.017711][T14831] ? file_update_time+0x98/0x1a0 [ 618.022682][T14831] shmem_file_write_iter+0xfb/0x120 [ 618.027930][T14831] __kernel_write_iter+0x29f/0x6d0 [ 618.033083][T14831] ? vfs_read+0x990/0x990 [ 618.037451][T14831] ? get_dump_page+0x156/0x200 [ 618.042258][T14831] ? __asan_memset+0x22/0x40 [ 618.046885][T14831] ? iov_iter_bvec+0xd4/0x1b0 [ 618.051603][T14831] dump_user_range+0x418/0x840 [ 618.056413][T14831] ? dump_skip+0x40/0x40 [ 618.060681][T14831] ? dump_emit+0x78/0xe0 [ 618.064972][T14831] ? dump_emit+0xa6/0xe0 [ 618.069252][T14831] ? elf_core_dump+0x2dbb/0x37c0 [ 618.074259][T14831] elf_core_dump+0x320e/0x37c0 [ 618.079107][T14831] ? load_elf_binary+0x2850/0x2850 [ 618.084267][T14831] ? verify_lock_unused+0x140/0x140 [ 618.089526][T14831] ? __lock_acquire+0x7eb0/0x7eb0 [ 618.094586][T14831] ? mas_next_slot+0x94c/0x980 [ 618.099421][T14831] ? rcu_read_lock_any_held+0xb4/0x140 [ 618.104938][T14831] ? 0xffffffffff600000 [ 618.109140][T14831] ? do_raw_spin_unlock+0x121/0x230 [ 618.114387][T14831] do_coredump+0x1791/0x24a0 [ 618.119031][T14831] ? nfs_stat_to_errno+0x170/0x170 [ 618.124194][T14831] ? lock_chain_count+0x20/0x20 [ 618.129089][T14831] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.134333][T14831] ? lockdep_hardirqs_on+0x98/0x150 [ 618.139566][T14831] get_signal+0x10da/0x1390 [ 618.144125][T14831] arch_do_signal_or_restart+0xc2/0x7b0 [ 618.149711][T14831] ? get_sigframe_size+0x20/0x20 [ 618.154688][T14831] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 618.160714][T14831] ? exit_to_user_mode_loop+0x3b/0x110 [ 618.166218][T14831] exit_to_user_mode_loop+0x70/0x110 [ 618.171548][T14831] exit_to_user_mode_prepare+0xee/0x180 [ 618.177135][T14831] irqentry_exit_to_user_mode+0x9/0x30 [ 618.182642][T14831] exc_page_fault+0x8c/0x100 [ 618.187297][T14831] asm_exc_page_fault+0x26/0x30 [ 618.192179][T14831] RIP: 0033:0x7f9e2299e561 [ 618.196644][T14831] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 618.216283][T14831] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 618.222386][T14831] RAX: 0000000000000000 RBX: 00007f9e22c25fa0 RCX: 00007f9e2299e559 [ 618.230472][T14831] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 618.238555][T14831] RBP: 00007f9e22a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 618.246571][T14831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.254667][T14831] R13: 00007f9e22c26038 R14: 00007f9e22c25fa0 R15: 00007ffc5eb9f788 [ 618.262694][T14831] [ 618.353584][T14831] memory: usage 307192kB, limit 307200kB, failcnt 21262 [ 618.360615][T14831] memory+swap: usage 429356kB, limit 9007199254740988kB, failcnt 0 [ 618.408627][T14831] kmem: usage 13984kB, limit 9007199254740988kB, failcnt 0 [ 618.461214][T14831] Memory cgroup stats for /syz2: [ 618.461505][T14831] cache 296939520 [ 618.481294][T14831] rss 901120 [ 618.498256][T14831] rss_huge 0 [ 618.511014][T14831] shmem 296927232 [ 618.537076][T14831] mapped_file 12288 [ 618.541000][T14831] dirty 12288 [ 618.605624][T14831] writeback 0 [ 618.609006][T14831] workingset_refault_anon 0 [ 618.666148][T14831] workingset_refault_file 0 [ 618.670773][T14831] swap 126476288 [ 618.735878][T14831] pgpgin 550659 [ 618.741437][T14831] pgpgout 477944 [ 618.745061][T14831] pgfault 113586 [ 618.748657][T14831] pgmajfault 6 [ 618.801552][T14831] inactive_anon 159801344 [ 618.805970][T14831] active_anon 137859072 [ 618.810168][T14831] inactive_file 0 [ 618.861203][T14831] active_file 12288 [ 618.865108][T14831] unevictable 0 [ 618.868617][T14831] hierarchical_memory_limit 314572800 [ 618.901422][T14831] hierarchical_memsw_limit 9223372036854771712 [ 618.907684][T14831] total_cache 296939520 [ 618.914353][T14831] total_rss 901120 [ 618.918142][T14831] total_rss_huge 0 [ 618.921973][T14831] total_shmem 296927232 [ 618.926211][T14831] total_mapped_file 12288 [ 618.930594][T14831] total_dirty 12288 [ 618.937991][T14831] total_writeback 0 [ 618.945480][T14831] total_workingset_refault_anon 0 [ 618.950561][T14831] total_workingset_refault_file 0 [ 618.967319][T14831] total_swap 126476288 [ 618.973894][T14831] total_pgpgin 550683 [ 618.977948][T14831] total_pgpgout 477968 [ 618.982120][T14831] total_pgfault 113629 [ 618.986427][T14831] total_pgmajfault 6 [ 618.990367][T14831] total_inactive_anon 159801344 [ 619.007863][T14831] total_active_anon 137859072 [ 619.015053][T14831] total_inactive_file 0 [ 619.019279][T14831] total_active_file 12288 [ 619.042251][T14831] total_unevictable 0 [ 619.046498][T14831] anon_cost 0 [ 619.049828][T14831] file_cost 0 [ 619.058250][T14831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2281,pid=14854,uid=0 [ 619.076116][T14831] Memory cgroup out of memory: Killed process 14854 (syz.2.2281) total-vm:98816kB, anon-rss:1408kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 619.701886][T14873] syz.2.2281 (14873) used greatest stack depth: 17512 bytes left [ 621.818282][T14854] syz.2.2281 (14854) used greatest stack depth: 17320 bytes left [ 622.863465][T15069] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2338'. [ 622.891724][T15074] mac80211_hwsim hwsim26 ..ãc¤±: renamed from wlan1 [ 622.971252][T14837] syz.2.2281 (14837) used greatest stack depth: 16872 bytes left [ 624.137560][T15101] netlink: 'syz.1.2349': attribute type 10 has an invalid length. [ 624.243251][T15105] ================================================================== [ 624.251391][T15105] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 624.259353][T15105] Write of size 72 at addr ffff88802cf6cd90 by task syz.0.2350/15105 [ 624.267482][T15105] [ 624.269844][T15105] CPU: 0 PID: 15105 Comm: syz.0.2350 Not tainted syzkaller #0 [ 624.277343][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 624.287458][T15105] Call Trace: [ 624.290780][T15105] [ 624.293753][T15105] dump_stack_lvl+0x18c/0x250 [ 624.298483][T15105] ? read_lock_is_recursive+0x20/0x20 [ 624.303913][T15105] ? show_regs_print_info+0x20/0x20 [ 624.309163][T15105] ? load_image+0x420/0x420 [ 624.313724][T15105] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 624.319239][T15105] ? __virt_addr_valid+0x10c/0x380 [ 624.324413][T15105] ? __virt_addr_valid+0x10c/0x380 [ 624.329592][T15105] ? __virt_addr_valid+0x10c/0x380 [ 624.334786][T15105] print_report+0xa8/0x210 [ 624.339249][T15105] ? __bpf_get_stackid+0x6c7/0x900 [ 624.344404][T15105] kasan_report+0x117/0x150 [ 624.348957][T15105] ? __bpf_get_stackid+0x6c7/0x900 [ 624.354118][T15105] kasan_check_range+0x241/0x290 [ 624.359087][T15105] ? __bpf_get_stackid+0x6c7/0x900 [ 624.364244][T15105] __asan_memcpy+0x40/0x70 [ 624.368695][T15105] __bpf_get_stackid+0x6c7/0x900 [ 624.373683][T15105] bpf_get_stackid_pe+0x343/0x410 [ 624.378741][T15105] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 624.384231][T15105] bpf_overflow_handler+0x1fc/0x510 [ 624.389471][T15105] ? bpf_overflow_handler+0xde/0x510 [ 624.394792][T15105] ? tp_perf_event_destroy+0x20/0x20 [ 624.400109][T15105] ? verify_lock_unused+0x140/0x140 [ 624.405341][T15105] ? __perf_event_account_interrupt+0x187/0x280 [ 624.411619][T15105] __perf_event_overflow+0x461/0x660 [ 624.416938][T15105] perf_swevent_overflow+0x274/0x340 [ 624.422262][T15105] ? perf_event_switch_output+0x790/0x790 [ 624.428014][T15105] ? rcu_is_watching+0x15/0xb0 [ 624.432903][T15105] perf_swevent_event+0x45c/0x570 [ 624.438049][T15105] ? perf_tp_event+0x1550/0x1550 [ 624.443022][T15105] ___perf_sw_event+0x4ab/0x730 [ 624.447905][T15105] ? ___perf_sw_event+0x19e/0x730 [ 624.452961][T15105] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 624.459400][T15105] ? __lock_acquire+0x1431/0x7eb0 [ 624.464472][T15105] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 624.470480][T15105] ? lock_chain_count+0x20/0x20 [ 624.475360][T15105] __perf_sw_event+0x139/0x270 [ 624.480165][T15105] do_user_addr_fault+0x1242/0x12d0 [ 624.485402][T15105] ? rcu_is_watching+0x15/0xb0 [ 624.490210][T15105] exc_page_fault+0x64/0x100 [ 624.494831][T15105] asm_exc_page_fault+0x26/0x30 [ 624.499714][T15105] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 624.505549][T15105] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 624.525221][T15105] RSP: 0018:ffffc9000c457958 EFLAGS: 00050206 [ 624.531496][T15105] RAX: ffffffff84328b01 RBX: 000000000000fe33 RCX: 000000000000ee33 [ 624.540244][T15105] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffffc9000c45e000 [ 624.548263][T15105] RBP: ffffc9000c457a90 R08: ffffc9000c46ce32 R09: 1ffff9200188d9c6 [ 624.556269][T15105] R10: dffffc0000000000 R11: fffff5200188d9c7 R12: ffffc9000c45d000 [ 624.564277][T15105] R13: 0000200000000000 R14: ffffc9000c457c18 R15: 1ffff9200188af83 [ 624.572298][T15105] ? _copy_from_iter+0x171/0x1290 [ 624.577387][T15105] _copy_from_iter+0x242/0x1290 [ 624.582279][T15105] ? __rwlock_init+0x150/0x150 [ 624.587095][T15105] ? copyout_mc+0x70/0x70 [ 624.591458][T15105] ? do_raw_spin_unlock+0x121/0x230 [ 624.596693][T15105] ? _raw_spin_unlock+0x28/0x40 [ 624.601600][T15105] ? find_vmap_area+0xfc/0x110 [ 624.606410][T15105] ? __check_object_size+0x4fc/0xa40 [ 624.611725][T15105] netlink_sendmsg+0x76b/0xbf0 [ 624.616523][T15105] ? netlink_getsockopt+0x590/0x590 [ 624.621848][T15105] ? apparmor_socket_sendmsg+0x8e/0x330 [ 624.627431][T15105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 624.632752][T15105] ? security_socket_sendmsg+0x80/0xa0 [ 624.638338][T15105] sock_write_iter+0x2dc/0x420 [ 624.643144][T15105] ? sock_read_iter+0x3f0/0x3f0 [ 624.648035][T15105] ? common_file_perm+0x198/0x1f0 [ 624.653094][T15105] vfs_write+0x474/0x9a0 [ 624.657374][T15105] ? file_end_write+0x250/0x250 [ 624.662281][T15105] ? __fget_files+0x3fc/0x460 [ 624.666994][T15105] ? __fdget_pos+0x1d8/0x330 [ 624.671618][T15105] ? ksys_write+0x74/0x260 [ 624.676089][T15105] ksys_write+0x151/0x260 [ 624.680460][T15105] ? __ia32_sys_read+0x90/0x90 [ 624.685342][T15105] ? lockdep_hardirqs_on+0x98/0x150 [ 624.690573][T15105] do_syscall_64+0x55/0xb0 [ 624.695016][T15105] ? clear_bhb_loop+0x40/0x90 [ 624.699733][T15105] ? clear_bhb_loop+0x40/0x90 [ 624.704433][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.710363][T15105] RIP: 0033:0x7f9d8579e559 [ 624.714842][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.734597][T15105] RSP: 002b:00007f9d839f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.743060][T15105] RAX: ffffffffffffffda RBX: 00007f9d85a25fa0 RCX: 00007f9d8579e559 [ 624.751154][T15105] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000006 [ 624.759157][T15105] RBP: 00007f9d85835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 624.767149][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.775140][T15105] R13: 00007f9d85a26038 R14: 00007f9d85a25fa0 R15: 00007ffdb88cf2c8 [ 624.783145][T15105] [ 624.786180][T15105] [ 624.788523][T15105] Allocated by task 15105: [ 624.793037][T15105] kasan_set_track+0x4e/0x70 [ 624.797658][T15105] __kasan_kmalloc+0x8f/0xa0 [ 624.802277][T15105] __kmalloc_node+0xb6/0x240 [ 624.806915][T15105] bpf_map_area_alloc+0x5e/0x110 [ 624.811906][T15105] prealloc_elems_and_freelist+0x86/0x1c0 [ 624.817695][T15105] stack_map_alloc+0x32b/0x4b0 [ 624.822495][T15105] map_create+0x877/0x12f0 [ 624.826942][T15105] __sys_bpf+0x651/0x890 [ 624.831229][T15105] __x64_sys_bpf+0x7c/0x90 [ 624.835670][T15105] do_syscall_64+0x55/0xb0 [ 624.840110][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.846040][T15105] [ 624.848421][T15105] Last potentially related work creation: [ 624.854175][T15105] kasan_save_stack+0x3e/0x60 [ 624.858895][T15105] __kasan_record_aux_stack+0xaf/0xc0 [ 624.864309][T15105] call_rcu+0x153/0x900 [ 624.868501][T15105] nf_unregister_net_hooks+0xcb/0x130 [ 624.873896][T15105] nf_defrag_ipv4_disable+0x95/0xe0 [ 624.879119][T15105] nf_ct_netns_put+0x2da/0x520 [ 624.883907][T15105] nf_conncount_destroy+0x41/0x150 [ 624.889052][T15105] ovs_ct_exit_finish+0xa5/0x210 [ 624.894021][T15105] ovs_exit_net+0xed/0x7a0 [ 624.898465][T15105] setup_net+0x7e5/0xa20 [ 624.902789][T15105] copy_net_ns+0x361/0x530 [ 624.907264][T15105] create_new_namespaces+0x3ce/0x700 [ 624.912595][T15105] copy_namespaces+0x42a/0x4a0 [ 624.917393][T15105] copy_process+0x16f6/0x3da0 [ 624.922098][T15105] kernel_clone+0x24b/0x8a0 [ 624.926624][T15105] __x64_sys_clone+0x1b7/0x230 [ 624.931416][T15105] do_syscall_64+0x55/0xb0 [ 624.935862][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.941787][T15105] [ 624.944130][T15105] Second to last potentially related work creation: [ 624.950742][T15105] kasan_save_stack+0x3e/0x60 [ 624.955456][T15105] __kasan_record_aux_stack+0xaf/0xc0 [ 624.960863][T15105] call_rcu+0x153/0x900 [ 624.965049][T15105] nf_unregister_net_hooks+0xcb/0x130 [ 624.970443][T15105] nf_defrag_ipv6_disable+0x95/0xe0 [ 624.975670][T15105] nf_ct_netns_put+0x375/0x520 [ 624.980455][T15105] nf_conncount_destroy+0x41/0x150 [ 624.985603][T15105] ovs_ct_exit_finish+0xa5/0x210 [ 624.990568][T15105] ovs_exit_net+0xed/0x7a0 [ 624.995011][T15105] cleanup_net+0x6f7/0xb00 [ 624.999458][T15105] process_scheduled_works+0xa60/0x1600 [ 625.005028][T15105] worker_thread+0xa5e/0xfe0 [ 625.009652][T15105] kthread+0x2fa/0x390 [ 625.013740][T15105] ret_from_fork+0x48/0x80 [ 625.018195][T15105] ret_from_fork_asm+0x11/0x20 [ 625.022995][T15105] [ 625.025338][T15105] The buggy address belongs to the object at ffff88802cf6cd80 [ 625.025338][T15105] which belongs to the cache kmalloc-cg-64 of size 64 [ 625.039604][T15105] The buggy address is located 16 bytes inside of [ 625.039604][T15105] allocated 40-byte region [ffff88802cf6cd80, ffff88802cf6cda8) [ 625.053614][T15105] [ 625.055960][T15105] The buggy address belongs to the physical page: [ 625.062405][T15105] page:ffffea0000b3db00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cf6c [ 625.072883][T15105] memcg:ffff88802eb71e01 [ 625.077182][T15105] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 625.085299][T15105] page_type: 0xffffffff() [ 625.089776][T15105] raw: 00fff00000000800 ffff88801884da00 0000000000000000 dead000000000001 [ 625.098504][T15105] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802eb71e01 [ 625.107117][T15105] page dumped because: kasan: bad access detected [ 625.113565][T15105] page_owner tracks the page as allocated [ 625.119323][T15105] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 7788, tgid 7787 (syz.0.451), ts 198509632279, free_ts 198508253162 [ 625.137512][T15105] post_alloc_hook+0x1c1/0x200 [ 625.142306][T15105] get_page_from_freelist+0x2181/0x22a0 [ 625.147878][T15105] __alloc_pages+0x1f0/0x460 [ 625.152609][T15105] alloc_slab_page+0x5d/0x180 [ 625.157333][T15105] new_slab+0x87/0x2d0 [ 625.161430][T15105] ___slab_alloc+0xc5c/0x12f0 [ 625.166136][T15105] __kmem_cache_alloc_node+0x11f/0x250 [ 625.171652][T15105] __kmalloc_node+0xa6/0x240 [ 625.176275][T15105] kvmalloc_node+0x70/0x180 [ 625.180803][T15105] nf_hook_entries_grow+0x27c/0x710 [ 625.186050][T15105] __nf_register_net_hook+0x2c9/0x910 [ 625.191450][T15105] nf_register_net_hook+0xb2/0x190 [ 625.196586][T15105] nf_register_net_hooks+0x44/0x1b0 [ 625.201816][T15105] nf_ct_netns_do_get+0x213/0x5c0 [ 625.206867][T15105] nf_ct_netns_inet_get+0x3b/0x150 [ 625.212025][T15105] nf_conncount_init+0x127/0x380 [ 625.217083][T15105] page last free stack trace: [ 625.221772][T15105] free_unref_page_prepare+0x7d7/0x8f0 [ 625.227349][T15105] free_unref_page+0x32/0x2e0 [ 625.232048][T15105] tlb_finish_mmu+0x13e/0x220 [ 625.236744][T15105] exit_mmap+0x428/0xb90 [ 625.241017][T15105] __mmput+0x118/0x3a0 [ 625.245131][T15105] exit_mm+0x23f/0x340 [ 625.249264][T15105] do_exit+0x909/0x2530 [ 625.253457][T15105] do_group_exit+0x22d/0x2f0 [ 625.258065][T15105] get_signal+0x12a6/0x1390 [ 625.262588][T15105] arch_do_signal_or_restart+0xc2/0x7b0 [ 625.268162][T15105] exit_to_user_mode_loop+0x70/0x110 [ 625.273476][T15105] exit_to_user_mode_prepare+0xee/0x180 [ 625.279061][T15105] syscall_exit_to_user_mode+0x1a/0x50 [ 625.284545][T15105] do_syscall_64+0x61/0xb0 [ 625.288985][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.294916][T15105] [ 625.297265][T15105] Memory state around the buggy address: [ 625.302914][T15105] ffff88802cf6cc80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 625.311018][T15105] ffff88802cf6cd00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 625.319188][T15105] >ffff88802cf6cd80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 625.327289][T15105] ^ [ 625.332675][T15105] ffff88802cf6ce00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 625.340756][T15105] ffff88802cf6ce80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 625.348839][T15105] ================================================================== [ 625.356952][T15105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 625.364163][T15105] CPU: 0 PID: 15105 Comm: syz.0.2350 Not tainted syzkaller #0 [ 625.371648][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 625.381754][T15105] Call Trace: [ 625.385064][T15105] [ 625.388040][T15105] dump_stack_lvl+0x18c/0x250 [ 625.392784][T15105] ? show_regs_print_info+0x20/0x20 [ 625.398007][T15105] ? load_image+0x420/0x420 [ 625.402548][T15105] panic+0x2ca/0x720 [ 625.406475][T15105] ? __lock_acquire+0x7eb0/0x7eb0 [ 625.411551][T15105] ? bpf_jit_dump+0xd0/0xd0 [ 625.416088][T15105] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 625.422016][T15105] ? _raw_spin_unlock+0x40/0x40 [ 625.426897][T15105] ? __bpf_get_stackid+0x6c7/0x900 [ 625.432044][T15105] check_panic_on_warn+0x84/0xa0 [ 625.437023][T15105] ? __bpf_get_stackid+0x6c7/0x900 [ 625.442346][T15105] end_report+0x6f/0x130 [ 625.446621][T15105] kasan_report+0x128/0x150 [ 625.451180][T15105] ? __bpf_get_stackid+0x6c7/0x900 [ 625.456332][T15105] kasan_check_range+0x241/0x290 [ 625.461303][T15105] ? __bpf_get_stackid+0x6c7/0x900 [ 625.466467][T15105] __asan_memcpy+0x40/0x70 [ 625.470912][T15105] __bpf_get_stackid+0x6c7/0x900 [ 625.475885][T15105] bpf_get_stackid_pe+0x343/0x410 [ 625.480941][T15105] bpf_prog_6611c23d801ea08d+0x29/0x3e [ 625.486421][T15105] bpf_overflow_handler+0x1fc/0x510 [ 625.491656][T15105] ? bpf_overflow_handler+0xde/0x510 [ 625.497061][T15105] ? tp_perf_event_destroy+0x20/0x20 [ 625.502385][T15105] ? verify_lock_unused+0x140/0x140 [ 625.507616][T15105] ? __perf_event_account_interrupt+0x187/0x280 [ 625.513889][T15105] __perf_event_overflow+0x461/0x660 [ 625.519218][T15105] perf_swevent_overflow+0x274/0x340 [ 625.524536][T15105] ? perf_event_switch_output+0x790/0x790 [ 625.530294][T15105] ? rcu_is_watching+0x15/0xb0 [ 625.535089][T15105] perf_swevent_event+0x45c/0x570 [ 625.540179][T15105] ? perf_tp_event+0x1550/0x1550 [ 625.545263][T15105] ___perf_sw_event+0x4ab/0x730 [ 625.550252][T15105] ? ___perf_sw_event+0x19e/0x730 [ 625.555320][T15105] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 625.561877][T15105] ? __lock_acquire+0x1431/0x7eb0 [ 625.566948][T15105] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 625.572958][T15105] ? lock_chain_count+0x20/0x20 [ 625.577928][T15105] __perf_sw_event+0x139/0x270 [ 625.582858][T15105] do_user_addr_fault+0x1242/0x12d0 [ 625.588110][T15105] ? rcu_is_watching+0x15/0xb0 [ 625.592911][T15105] exc_page_fault+0x64/0x100 [ 625.597541][T15105] asm_exc_page_fault+0x26/0x30 [ 625.602418][T15105] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 625.608255][T15105] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 625.627976][T15105] RSP: 0018:ffffc9000c457958 EFLAGS: 00050206 [ 625.634073][T15105] RAX: ffffffff84328b01 RBX: 000000000000fe33 RCX: 000000000000ee33 [ 625.642070][T15105] RDX: 0000000000000001 RSI: 0000200000001000 RDI: ffffc9000c45e000 [ 625.650072][T15105] RBP: ffffc9000c457a90 R08: ffffc9000c46ce32 R09: 1ffff9200188d9c6 [ 625.658153][T15105] R10: dffffc0000000000 R11: fffff5200188d9c7 R12: ffffc9000c45d000 [ 625.666165][T15105] R13: 0000200000000000 R14: ffffc9000c457c18 R15: 1ffff9200188af83 [ 625.674254][T15105] ? _copy_from_iter+0x171/0x1290 [ 625.679321][T15105] _copy_from_iter+0x242/0x1290 [ 625.684202][T15105] ? __rwlock_init+0x150/0x150 [ 625.689017][T15105] ? copyout_mc+0x70/0x70 [ 625.693379][T15105] ? do_raw_spin_unlock+0x121/0x230 [ 625.698604][T15105] ? _raw_spin_unlock+0x28/0x40 [ 625.703486][T15105] ? find_vmap_area+0xfc/0x110 [ 625.708286][T15105] ? __check_object_size+0x4fc/0xa40 [ 625.713594][T15105] netlink_sendmsg+0x76b/0xbf0 [ 625.718392][T15105] ? netlink_getsockopt+0x590/0x590 [ 625.723617][T15105] ? apparmor_socket_sendmsg+0x8e/0x330 [ 625.729189][T15105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 625.734606][T15105] ? security_socket_sendmsg+0x80/0xa0 [ 625.740107][T15105] sock_write_iter+0x2dc/0x420 [ 625.745008][T15105] ? sock_read_iter+0x3f0/0x3f0 [ 625.749906][T15105] ? common_file_perm+0x198/0x1f0 [ 625.754965][T15105] vfs_write+0x474/0x9a0 [ 625.759245][T15105] ? file_end_write+0x250/0x250 [ 625.764223][T15105] ? __fget_files+0x3fc/0x460 [ 625.768935][T15105] ? __fdget_pos+0x1d8/0x330 [ 625.773559][T15105] ? ksys_write+0x74/0x260 [ 625.778008][T15105] ksys_write+0x151/0x260 [ 625.782375][T15105] ? __ia32_sys_read+0x90/0x90 [ 625.787208][T15105] ? lockdep_hardirqs_on+0x98/0x150 [ 625.792462][T15105] do_syscall_64+0x55/0xb0 [ 625.796918][T15105] ? clear_bhb_loop+0x40/0x90 [ 625.801704][T15105] ? clear_bhb_loop+0x40/0x90 [ 625.806408][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.812369][T15105] RIP: 0033:0x7f9d8579e559 [ 625.816832][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.836468][T15105] RSP: 002b:00007f9d839f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 625.844920][T15105] RAX: ffffffffffffffda RBX: 00007f9d85a25fa0 RCX: 00007f9d8579e559 [ 625.852917][T15105] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000006 [ 625.860908][T15105] RBP: 00007f9d85835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 625.869335][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.877334][T15105] R13: 00007f9d85a26038 R14: 00007f9d85a25fa0 R15: 00007ffdb88cf2c8 [ 625.885344][T15105] [ 625.888971][T15105] Kernel Offset: disabled [ 625.893325][T15105] Rebooting in 86400 seconds..