last executing test programs: 3.729040719s ago: executing program 1 (id=3335): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000", 0x17}], 0x1}, 0x0) 3.650547821s ago: executing program 1 (id=3338): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c04fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='.9\xb7\xa8(\x05\xb6\xbc\xdc\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` \x8e\x1a\xb9\xd5\xa1B\xe5\xcd\xc1\xefPHG-\xf5\x0e\xec\x13l\xd1`A/\xef\xa6\xe7\f\x8c') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf4}, 0x1050b0, 0x2, 0x6, 0x0, 0xb, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0e, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="704317fdfa5e030000000300005a9d6180ba8a000000400012003597e9cdf55215000000000000000083721a12593ec50274b3c65f42eb9f02dc85a449968999c6709f0d239e2718521dcc723667f36896a3e742b7a0acaf0f7c941130890b8bbf517eb91a924f5a216772f12ced91098da47006217754164aeb86a41ab8337c214de9cb73959876975bfc24b601"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) close(0x4) 3.26845812s ago: executing program 0 (id=3342): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x0, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xfffffffe, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$kcm(0x28, 0x5, 0x0) recvmsg(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/101, 0x65}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r2, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r5, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000bc0)=[{}], 0x8, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x39}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @alu={0x0, 0x1, 0xa, 0x8, 0x9, 0xfffffffffffffff0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x8, 0x84, &(0x7f0000000700)=""/132, 0x41000, 0x40, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x3, &(0x7f0000000e00)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r2], &(0x7f0000000e40)=[{0x1, 0x1, 0x7, 0x1993960df134fd3f}, {0x1, 0x1, 0x1}, {0x4, 0x2, 0xe}], 0x10, 0xd}, 0x94) socket$kcm(0x2, 0x200000000000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x56, 0x2, 0x0, 0x0, 0x7, 0x1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x9}, 0x101809, 0xc, 0x0, 0x5, 0x7, 0x5, 0x0, 0x0, 0x20400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) write$cgroup_subtree(r9, 0x0, 0x9a) 2.495321009s ago: executing program 0 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) close(r0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 2.44955676s ago: executing program 1 (id=3346): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 2.44878797s ago: executing program 2 (id=3347): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='.9\xb7\xa8(\x05\xb6\xbc\xdc\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` \x8e\x1a\xb9\xd5\xa1B\xe5\xcd\xc1\xefPHG-\xf5\x0e\xec\x13l\xd1`A/\xef\xa6\xe7\f\x8c') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095000000000000006916180000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf4}, 0x1050b0, 0x2, 0x6, 0x0, 0xb, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0e, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="704317fdfa5e030000000300005a9d6180ba8a000000400012003597e9cdf55215000000000000000083721a12593ec50274b3c65f42eb9f02dc85a449968999c6709f0d239e2718521dcc723667f36896a3e742b7a0acaf0f7c941130890b8bbf517eb91a924f5a216772f12ced91098da47006217754164aeb86a41ab8337c214de9cb73959876975bfc24b601"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) close(0x4) 1.981466142s ago: executing program 0 (id=3348): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000010000000003000000000100000002"], 0x0, 0x53}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$sock(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='1UB', 0x5dc}], 0x1}, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf02e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x65, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x5, &(0x7f00000002c0)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}, {0x0, 0x9d, 0x0, 0x4}, {0x5f, 0x3, 0x4, 0x5}, {0x9, 0x4e, 0xa, 0x1}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) 1.905537243s ago: executing program 1 (id=3349): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x828, 0x0, 0x0, 0x8, 0x7, 0x185, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c990", 0x11}], 0x1}, 0x4845) recvmsg$kcm(r2, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x42) recvmsg(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="14000000040000000400000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, &(0x7f0000001600), 0x0}, 0x20) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x40, 0x0, 0x8000000007, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_config_ext, 0x101804, 0x9, 0x8, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x4010744d, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b87031300fff01f000000000000000800030018000a000d0013009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x20, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x2, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x2, 0x1, 0x84) socketpair(0x22, 0x1, 0x23, &(0x7f0000000000)) sendmsg$kcm(r8, &(0x7f0000001c00)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @rand_addr=0x64010100}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000500)="cc", 0x1}], 0x1}, 0x48005) setsockopt$sock_attach_bpf(r8, 0x84, 0x7c, &(0x7f0000000000), 0x8) r9 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r9, r6, 0x0, 0x0, 0x0}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x5a, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x4008057) 1.766115686s ago: executing program 2 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="e566844ec081b12fb36a05589a686465ea9925f490bc92bc3175b8d6051e271f2f2dfbf11c8fd7d01bb9b43ae81c7d3aeb39c23f4c505a525ce92689b2f60c7de8377abf73c40e888932ce4a499f79a63efd690eaaebc10f417e355d1deaa46f332cc35e5b6fa2277f27ed2dc329bf74b42bacc26765d2d83e47bc668795d29d65a09701"], 0x0, 0xffffffff, 0x18, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x2}, 0x2) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="9be4aee5b822", @ANYRES64=0x0], 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r8, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000340)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffff001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @generic={0x1a, 0x7, 0x5, 0xc9, 0x80000001}], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x48, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x67, 0xed4}, 0x10, 0x16fb2, r7, 0x2, &(0x7f0000000540)=[r8], &(0x7f0000000580)=[{0x0, 0x1, 0x8, 0x3}, {0x5, 0x1, 0x2, 0x8}], 0x10, 0xe32e}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r8, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000bf00"], 0x50) 1.132616862s ago: executing program 3 (id=3356): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000009e000000620a00ff000000006100081900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) socketpair(0x21, 0x80000, 0x922, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000800)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/224, 0xe0}], 0x1, &(0x7f0000000740)=""/133, 0x85}, 0x12000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.028230815s ago: executing program 3 (id=3357): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 1.006936615s ago: executing program 3 (id=3358): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6, 0x0, 0x0}, 0x40) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='.9\xb7\xa8(\x05\xb6\xbc\xdc\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` \x8e\x1a\xb9\xd5\xa1B\xe5\xcd\xc1\xefPHG-\xf5\x0e\xec\x13l\xd1`A/\xef\xa6\xe7\f\x8c') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf4}, 0x1050b0, 0x2, 0x6, 0x0, 0xb, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0e, 0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="704317fdfa5e030000000300005a9d6180ba8a000000400012003597e9cdf55215000000000000000083721a12593ec50274b3c65f42eb9f02dc85a449968999c6709f0d239e2718521dcc723667f36896a3e742b7a0acaf0f7c941130890b8bbf517eb91a924f5a216772f12ced91098da47006217754164aeb86a41ab8337c214de9cb73959876975bfc24b601"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) close(0x4) 890.064288ms ago: executing program 1 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) close(r0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 754.804591ms ago: executing program 2 (id=3360): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x9b, 0x4, 0x1000, 0xfffff271, 0x6, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0x10, "090041c20949e0afc65b200dd6a0"}]}}}], 0x40, 0xffffffff}, 0x20002800) 734.848852ms ago: executing program 0 (id=3361): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6, 0x20000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 633.639944ms ago: executing program 1 (id=3362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="e566844ec081b12fb36a05589a686465ea9925f490bc92bc3175b8d6051e271f2f2dfbf11c8fd7d01bb9b43ae81c7d3aeb39c23f4c505a525ce92689b2f60c7de8377abf73c40e888932ce4a499f79a63efd690eaaebc10f417e355d1deaa46f332cc35e5b6fa2277f27ed2dc329bf74b42bacc26765d2d83e47bc668795d29d65a09701"], 0x0, 0xffffffff, 0x18, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x2}, 0x2) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="9be4aee5b822", @ANYRES64=0x0], 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r8, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000340)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffff001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @generic={0x1a, 0x7, 0x5, 0xc9, 0x80000001}], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x48, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x67, 0xed4}, 0x10, 0x16fb2, r7, 0x2, &(0x7f0000000540)=[r8], &(0x7f0000000580)=[{0x0, 0x1, 0x8, 0x3}, {0x5, 0x1, 0x2, 0x8}], 0x10, 0xe32e}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r8, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000bf00"], 0x50) 514.779497ms ago: executing program 2 (id=3363): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x0, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1e, 0xfffffffe, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$kcm(0x28, 0x5, 0x0) recvmsg(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/101, 0x65}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r2, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r5, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000bc0)=[{}], 0x8, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x39}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @alu={0x0, 0x1, 0xa, 0x8, 0x9, 0xfffffffffffffff0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x8, 0x84, &(0x7f0000000700)=""/132, 0x41000, 0x40, '\x00', r6, 0x1b, r7, 0x8, &(0x7f0000000a00)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x3, &(0x7f0000000e00)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r2], &(0x7f0000000e40)=[{0x1, 0x1, 0x7, 0x1993960df134fd3f}, {0x1, 0x1, 0x1}, {0x4, 0x2, 0xe}], 0x10, 0xd}, 0x94) socket$kcm(0x2, 0x200000000000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x56, 0x2, 0x0, 0x0, 0x7, 0x1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x9}, 0x101809, 0xc, 0x0, 0x5, 0x7, 0x5, 0x0, 0x0, 0x20400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) write$cgroup_subtree(r9, 0x0, 0x9a) 513.420157ms ago: executing program 3 (id=3371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000010ebce3ffca0456b00056554b3e7508653cbf3741143abab06bb8eab6c01f95dba1d281c25bf4ce3ec711a268fd3ebd6b59dc0080341b63c21d30b7cf62376ca6c7f42e49625e0e63c2c16e4d07738195ea118d325c09e5192c742dee07005a4a52728e8a50964e7ffc8cc37b90e7b02058f221c70e242da62d30e4e23417f967d08de74a61c9b2dfcf0858478b30bbad6ef1f6ad892b1c7db8b966d3ba6ec30a29c0aa850054ea366240f76f70c1417ddde2cad53cfa60d65b888c4b6cdf389fb4eaef93d6a09515041309ff8699cc3219516f3bd660ba418d9a275494757a15adb82a90ba3a3ff3aa1f0b212eb26601cde19c827"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="400000000020040018220800", @ANYRES32=r2, @ANYBLOB="000000000000000063a70601ffffffff"], &(0x7f0000000180)='GPL\x00', 0xffff15f4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) close(r0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x2b, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x40c0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x20000007, 0x0, 0x8000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r6 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x81, 0x0, 0x2, 0x0, 0x0, 0x200, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x400008, 0x0, 0x7, 0x2000, 0x0, 0x7f, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000500)="2e0000002e008f866b29924a6f130000005e140608000000000022727f0000a31802dd00003b1fcc7336507fb18f", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='.\x00'}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=r9, 0x4) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0x7}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r10 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r10, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 465.201088ms ago: executing program 0 (id=3364): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7f, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72", 0x0, 0xfe, 0x60000000}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xd, 0x1, 0x0, r5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b87003000000000000000160af365040014000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000000140)="d8661035880157ca1b5e1b5a6d131dae", 0x10}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2004c054) 308.099962ms ago: executing program 2 (id=3365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) close(r0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 213.458144ms ago: executing program 3 (id=3366): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a", 0x23}], 0x1}, 0x0) 43.432489ms ago: executing program 0 (id=3367): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="a7c6716a0000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x73) close(r9) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000100)={r4}) setsockopt$sock_attach_bpf(r5, 0x107, 0x2, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r8}, 0x18) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES16=r11], 0xfe33) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fb", 0x1}, {&(0x7f0000000680)="660f829e3add48b05d82", 0xa}, {&(0x7f0000000800)="adb34727cc508abe1092fb01d95f9d", 0xf}], 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 16.797989ms ago: executing program 2 (id=3368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYBLOB="e566844ec081b12fb36a05589a686465ea9925f490bc92bc3175b8d6051e271f2f2dfbf11c8fd7d01bb9b43ae81c7d3aeb39c23f4c505a525ce92689b2f60c7de8377abf73c40e888932ce4a499f79a63efd690eaaebc10f417e355d1deaa46f332cc35e5b6fa2277f27ed2dc329bf74b42bacc26765d2d83e47bc668795d29d65a09701"], 0x0, 0xffffffff, 0x18, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) recvmsg$unix(r5, &(0x7f00000024c0)={&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x2}, 0x2) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde605cbeac671e8e8fdecb035865e362ead91b1979a5ae30705b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd21142525815b91076ccb7b37b41215c184e731fb13d100323b77f613af02b6f3259d6f3ac85da4fe304ecfca2be5f4a8b3910a8f0a88d082ac161c4a3c1132831a88f199f67aca8f4698996d076250b2b75cdc7776b8cab72716149f70efb190007832c6077da0df4c63a226284cd6a2e5ec5bb28f18dd44821065b9758fd159c490421901361244c01bfa0cddbc726f2b4ceace9f9309f507e6a7135b33f418af0a63bfb480c2feced947dae1d7dc19c4f1807b17c559c27be4d18b2e0a3cf26832d7fc97cea307de1852f90317b501bf66473eb6dac986d7b5682abc3a5ea1dabde56b9e3a56ba20a65dc0df39edd5f34ed22a8f0c6594a894901e455d0369e407dae0f4fb4e181415153000000b6b384cb4bbfd4edfd70cd7324de228e1047a61292abe63fc71063a9040bd927779d56ef0f4725dfb3822ce1e24632f7d51a0e65bd5664fcd3e4a0b0388b842115b5689769438f9763a55956288e78b6cad0ff3f310722b4a5cc4f25a69753fcc8ece189808e6f2f71ca2337d0de3a9feaa3f4cd2a2c69d21daec3751aca69f0a6f5b0af65aace6d04dad91c67e57a0f7b8accb3f8d9b787e002e56a7149c2d10a268884e695256ddb9c17853e29689f41667522e6932294"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="9be4aee5b822", @ANYRES64=0x0], 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r8, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0xe, &(0x7f0000000340)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffff001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @generic={0x1a, 0x7, 0x5, 0xc9, 0x80000001}], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x48, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x67, 0xed4}, 0x10, 0x16fb2, r7, 0x2, &(0x7f0000000540)=[r8], &(0x7f0000000580)=[{0x0, 0x1, 0x8, 0x3}, {0x5, 0x1, 0x2, 0x8}], 0x10, 0xe32e}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r8, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000bf00"], 0x50) 0s ago: executing program 3 (id=3369): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) close(r0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) (fail_nth: 1) kernel console output (not intermixed with test programs): 79] ? aa_get_newest_label+0xfd/0x5c0 [ 389.171044][T11979] ? free_vm_area+0x50/0x50 [ 389.175549][T11979] ? end_current_label_crit_section+0x170/0x170 [ 389.181795][T11979] ? verify_lock_unused+0x140/0x140 [ 389.186993][T11979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 389.192539][T11979] __vmalloc+0x7a/0x90 [ 389.196612][T11979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 389.202157][T11979] bpf_prog_alloc_no_stats+0x46/0x430 [ 389.207536][T11979] bpf_prog_alloc+0x3d/0x1a0 [ 389.212127][T11979] bpf_prog_load+0x6b2/0x1610 [ 389.216811][T11979] ? map_freeze+0x420/0x420 [ 389.221314][T11979] ? __might_fault+0xaa/0x120 [ 389.225987][T11979] ? __lock_acquire+0x7eb0/0x7eb0 [ 389.231012][T11979] ? file_end_write+0x159/0x250 [ 389.235865][T11979] ? __might_fault+0xaa/0x120 [ 389.240542][T11979] ? __might_fault+0xc6/0x120 [ 389.245215][T11979] ? __might_fault+0xaa/0x120 [ 389.249890][T11979] ? bpf_lsm_bpf+0x9/0x10 [ 389.254217][T11979] ? security_bpf+0x7e/0xa0 [ 389.258722][T11979] __sys_bpf+0x5ba/0x890 [ 389.262964][T11979] ? bpf_link_show_fdinfo+0x560/0x560 [ 389.268343][T11979] ? lock_chain_count+0x20/0x20 [ 389.273220][T11979] __x64_sys_bpf+0x7c/0x90 [ 389.277637][T11979] do_syscall_64+0x55/0xb0 [ 389.282049][T11979] ? clear_bhb_loop+0x40/0x90 [ 389.286723][T11979] ? clear_bhb_loop+0x40/0x90 [ 389.291396][T11979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.297301][T11979] RIP: 0033:0x7fa53f39e1d9 [ 389.301715][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.321316][T11979] RSP: 002b:00007fa5401c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.329728][T11979] RAX: ffffffffffffffda RBX: 00007fa53f625fa0 RCX: 00007fa53f39e1d9 [ 389.337695][T11979] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 389.345661][T11979] RBP: 00007fa5401c2090 R08: 0000000000000000 R09: 0000000000000000 [ 389.353629][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.361594][T11979] R13: 00007fa53f626038 R14: 00007fa53f625fa0 R15: 00007ffc8d5ca7d8 [ 389.369574][T11979] [ 389.492212][T11979] syz.0.1754: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 389.581667][T11979] CPU: 1 PID: 11979 Comm: syz.0.1754 Not tainted syzkaller #0 [ 389.589192][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 389.599262][T11979] Call Trace: [ 389.602565][T11979] [ 389.605514][T11979] dump_stack_lvl+0x18c/0x250 [ 389.610219][T11979] ? show_regs_print_info+0x20/0x20 [ 389.615439][T11979] ? load_image+0x420/0x420 [ 389.619969][T11979] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 389.626405][T11979] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 389.632929][T11979] warn_alloc+0x246/0x340 [ 389.637284][T11979] ? __get_vm_area_node+0x125/0x370 [ 389.642510][T11979] ? zone_watermark_ok_safe+0x230/0x230 [ 389.648072][T11979] ? rcu_is_watching+0x15/0xb0 [ 389.652843][T11979] ? __get_vm_area_node+0x356/0x370 [ 389.658045][T11979] __vmalloc_node_range+0x394/0x1320 [ 389.663333][T11979] ? mark_lock+0x94/0x320 [ 389.667664][T11979] ? __lock_acquire+0x1431/0x7eb0 [ 389.672697][T11979] ? aa_get_newest_label+0xfd/0x5c0 [ 389.677891][T11979] ? free_vm_area+0x50/0x50 [ 389.682395][T11979] ? end_current_label_crit_section+0x170/0x170 [ 389.688634][T11979] ? verify_lock_unused+0x140/0x140 [ 389.693835][T11979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 389.699377][T11979] __vmalloc+0x7a/0x90 [ 389.703449][T11979] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 389.708993][T11979] bpf_prog_alloc_no_stats+0x46/0x430 [ 389.714364][T11979] bpf_prog_alloc+0x3d/0x1a0 [ 389.718957][T11979] bpf_prog_load+0x6b2/0x1610 [ 389.723643][T11979] ? map_freeze+0x420/0x420 [ 389.728144][T11979] ? __might_fault+0xaa/0x120 [ 389.732818][T11979] ? __lock_acquire+0x7eb0/0x7eb0 [ 389.737836][T11979] ? file_end_write+0x159/0x250 [ 389.742685][T11979] ? __might_fault+0xaa/0x120 [ 389.747355][T11979] ? __might_fault+0xc6/0x120 [ 389.752024][T11979] ? __might_fault+0xaa/0x120 [ 389.756694][T11979] ? bpf_lsm_bpf+0x9/0x10 [ 389.761040][T11979] ? security_bpf+0x7e/0xa0 [ 389.765546][T11979] __sys_bpf+0x5ba/0x890 [ 389.769785][T11979] ? bpf_link_show_fdinfo+0x560/0x560 [ 389.775164][T11979] ? lock_chain_count+0x20/0x20 [ 389.780017][T11979] __x64_sys_bpf+0x7c/0x90 [ 389.784442][T11979] do_syscall_64+0x55/0xb0 [ 389.788849][T11979] ? clear_bhb_loop+0x40/0x90 [ 389.793519][T11979] ? clear_bhb_loop+0x40/0x90 [ 389.798192][T11979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.804088][T11979] RIP: 0033:0x7fa53f39e1d9 [ 389.808498][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.828105][T11979] RSP: 002b:00007fa5401c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.836518][T11979] RAX: ffffffffffffffda RBX: 00007fa53f625fa0 RCX: 00007fa53f39e1d9 [ 389.844487][T11979] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 389.852453][T11979] RBP: 00007fa5401c2090 R08: 0000000000000000 R09: 0000000000000000 [ 389.860419][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.868382][T11979] R13: 00007fa53f626038 R14: 00007fa53f625fa0 R15: 00007ffc8d5ca7d8 [ 389.876361][T11979] [ 389.882952][T11979] Mem-Info: [ 389.886101][T11979] active_anon:8146 inactive_anon:0 isolated_anon:0 [ 389.886101][T11979] active_file:17796 inactive_file:40075 isolated_file:0 [ 389.886101][T11979] unevictable:768 dirty:154 writeback:0 [ 389.886101][T11979] slab_reclaimable:10868 slab_unreclaimable:95773 [ 389.886101][T11979] mapped:25243 shmem:1618 pagetables:551 [ 389.886101][T11979] sec_pagetables:0 bounce:0 [ 389.886101][T11979] kernel_misc_reclaimable:0 [ 389.886101][T11979] free:1339180 free_pcp:7673 free_cma:0 [ 389.954097][T11979] Node 0 active_anon:31484kB inactive_anon:0kB active_file:71184kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101112kB dirty:612kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10836kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no [ 389.991198][T11979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 390.024334][T11979] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.053728][T11979] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 390.059523][T11979] Node 0 DMA32 free:1450304kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:31444kB inactive_anon:0kB active_file:71184kB inactive_file:159020kB unevictable:1536kB writepending:612kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:13104kB local_pcp:1728kB free_cma:0kB [ 390.106008][T11979] lowmem_reserve[]: 0 0 1 1 1 [ 390.111172][T11979] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.201716][T11979] lowmem_reserve[]: 0 0 0 0 0 [ 390.206495][T11979] Node 1 Normal free:3891308kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18528kB local_pcp:8992kB free_cma:0kB [ 390.261498][T11979] lowmem_reserve[]: 0 0 0 0 0 [ 390.270780][T11979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.312778][T11979] Node 0 DMA32: 1765*4kB (UME) 1950*8kB (UME) 1826*16kB (UME) 859*32kB (UME) 573*64kB (UME) 176*128kB (UM) 103*256kB (UM) 66*512kB (UME) 40*1024kB (M) 21*2048kB (M) 285*4096kB (UM) = 1450052kB [ 390.344667][T11979] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 390.374797][T11979] Node 1 Normal: 247*4kB (UME) 56*8kB (UME) 43*16kB (UME) 121*32kB (UME) 34*64kB (UME) 3*128kB (E) 1*256kB (E) 3*512kB (UME) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3891308kB [ 390.413669][T11979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.443988][T11979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.479747][T11979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.511379][T11998] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 390.526200][T11979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.560666][T11979] 59886 total pagecache pages [ 390.567153][T11979] 0 pages in swap cache [ 390.571336][T11979] Free swap = 124996kB [ 390.601669][T11979] Total swap = 124996kB [ 390.605875][T11979] 2097051 pages RAM [ 390.609697][T11979] 0 pages HighMem/MovableOnly [ 390.617529][T11998] geneve0: entered promiscuous mode [ 390.623127][T11979] 421118 pages reserved [ 390.623138][T11979] 0 pages cma reserved [ 390.730814][T11998] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 390.856696][T12004] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.1763'. [ 391.475577][T12035] delete_channel: no stack [ 391.648708][T12041] bridge0: port 4(veth0_to_bridge) entered blocking state [ 391.661569][T12041] bridge0: port 4(veth0_to_bridge) entered disabled state [ 391.678040][T12041] veth0_to_bridge: entered allmulticast mode [ 391.769995][T12041] veth0_to_bridge: entered promiscuous mode [ 391.784063][T12041] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 391.817037][T12041] bridge0: port 4(veth0_to_bridge) entered blocking state [ 391.828009][T12041] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 392.184847][T12061] netlink: 'syz.0.1780': attribute type 21 has an invalid length. [ 392.194756][T12061] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1780'. [ 392.408800][T12070] netlink: 'syz.0.1780': attribute type 3 has an invalid length. [ 392.450150][T12070] netlink: 'syz.0.1780': attribute type 5 has an invalid length. [ 392.521787][T12070] netlink: 'syz.0.1780': attribute type 6 has an invalid length. [ 392.529575][T12070] netlink: 197520 bytes leftover after parsing attributes in process `syz.0.1780'. [ 392.961216][T12084] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1787'. [ 392.975364][T12084] openvswitch: netlink: Flow key attribute not present in set flow. [ 393.013791][T12080] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 393.040394][T12080] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 393.054015][T12080] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 393.065695][T12080] team0: Port device netdevsim0 added [ 393.075915][T12087] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 393.084545][T12087] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 393.102906][T12087] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 393.166356][T12087] team0: Port device netdevsim0 removed [ 393.188164][T12087] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 393.244102][T12091] syzkaller0: entered promiscuous mode [ 393.249596][T12091] syzkaller0: entered allmulticast mode [ 393.354429][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1791'. [ 394.784461][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1791'. [ 395.040326][T12122] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1798'. [ 395.058738][T12122] openvswitch: netlink: Flow key attribute not present in set flow. [ 397.437945][T12129] bridge0: port 4(veth0_to_bridge) entered blocking state [ 397.445528][T12129] bridge0: port 4(veth0_to_bridge) entered disabled state [ 397.452888][T12129] veth0_to_bridge: entered allmulticast mode [ 397.459831][T12129] veth0_to_bridge: entered promiscuous mode [ 397.466450][T12142] netlink: 'syz.0.1804': attribute type 2 has an invalid length. [ 397.481479][T12142] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1804'. [ 397.496808][T12146] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1805'. [ 397.683964][T12155] netlink: 'syz.3.1809': attribute type 33 has an invalid length. [ 397.694720][T12155] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1809'. [ 397.771005][T12155] syz.3.1809[12155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.772549][T12155] syz.3.1809[12155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.188096][T12167] netlink: 'syz.2.1814': attribute type 19 has an invalid length. [ 398.420344][T12171] netlink: 'syz.0.1816': attribute type 3 has an invalid length. [ 398.429073][T12171] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1816'. [ 398.504943][T12169] bridge0: port 3(veth0_to_bridge) entered blocking state [ 398.516517][T12169] bridge0: port 3(veth0_to_bridge) entered disabled state [ 398.528371][T12169] veth0_to_bridge: entered allmulticast mode [ 398.810323][T12169] veth0_to_bridge: entered promiscuous mode [ 398.824305][T12169] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 398.864357][T12169] bridge0: port 3(veth0_to_bridge) entered blocking state [ 398.876349][T12169] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 399.163267][T12189] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1821'. [ 399.176170][T12189] openvswitch: netlink: Key type 29 is not supported [ 399.189211][T12189] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1821'. [ 399.211028][T12189] openvswitch: netlink: Key type 29 is not supported [ 399.917186][T12210] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.1829'. [ 399.985816][T12214] wg2: left promiscuous mode [ 399.995319][T12214] wg2: left allmulticast mode [ 400.434114][T12229] netlink: 'syz.0.1832': attribute type 21 has an invalid length. [ 400.609247][T12233] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1833'. [ 400.630306][T12233] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1833'. [ 400.667572][T12233] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1833'. [ 401.113816][T12258] netlink: 'syz.3.1842': attribute type 21 has an invalid length. [ 401.124860][T12258] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.021205][T12276] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 402.040279][T12276] batman_adv: batadv0: Adding interface: virt_wifi0 [ 402.066443][T12276] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.103206][T12276] batman_adv: batadv0: Interface activated: virt_wifi0 [ 402.773864][T12300] __nla_validate_parse: 1 callbacks suppressed [ 402.773900][T12300] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1855'. [ 402.789914][T12300] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1855'. [ 402.808372][T12300] bond0: (slave bond_slave_0): Releasing backup interface [ 402.837044][T12300] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 402.985520][T12309] netlink: 'syz.0.1858': attribute type 9 has an invalid length. [ 402.994211][T12309] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1858'. [ 403.075231][T12309] netlink: 'syz.0.1858': attribute type 9 has an invalid length. [ 403.085009][T12309] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1858'. [ 403.354533][T12318] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1862'. [ 403.409629][T12323] netlink: 'syz.2.1863': attribute type 10 has an invalid length. [ 403.758319][T12335] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1866'. [ 403.844662][T12330] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1866'. [ 404.579079][T12323] team0 (unregistering): Port device C removed [ 404.600721][T12323] team0 (unregistering): Port device team_slave_1 removed [ 404.610543][T12323] team0 (unregistering): Port device veth0_to_bond removed [ 404.635910][T12323] team0 (unregistering): Port device geneve1 removed [ 404.843024][T12346] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1869'. [ 404.870492][T12346] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1869'. [ 405.017197][T12346] bond0: (slave bond_slave_0): Releasing backup interface [ 405.139337][T12346] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 405.312601][T12357] netlink: 'syz.1.1873': attribute type 9 has an invalid length. [ 405.321296][T12357] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1873'. [ 405.504984][T12357] netlink: 'syz.1.1873': attribute type 9 has an invalid length. [ 405.920404][T12370] netlink: 'syz.0.1878': attribute type 10 has an invalid length. [ 405.937576][T12370] bridge0: port 3(team0) entered disabled state [ 405.984285][T12370] team0 (unregistering): left allmulticast mode [ 405.991067][T12370] C: left allmulticast mode [ 405.995919][T12370] team_slave_1: left allmulticast mode [ 406.001831][T12370] geneve1: left allmulticast mode [ 406.007061][T12370] team0 (unregistering): left promiscuous mode [ 406.013369][T12370] C: left promiscuous mode [ 406.018176][T12370] team_slave_1: left promiscuous mode [ 406.025178][T12370] geneve1: left promiscuous mode [ 406.030584][T12370] bridge0: port 3(team0) entered disabled state [ 406.074084][T12370] team0 (unregistering): Port device C removed [ 406.168461][T12370] team0 (unregistering): Port device team_slave_1 removed [ 406.210287][T12370] team0 (unregistering): Port device geneve1 removed [ 406.533857][T12397] : (slave bond_slave_0): Releasing backup interface [ 406.562197][T12397] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 407.128136][T12417] netlink: 'syz.2.1892': attribute type 9 has an invalid length. [ 407.346176][T12417] netlink: 'syz.2.1892': attribute type 9 has an invalid length. [ 407.620736][T12424] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 407.643831][T12424] bridge0: port 2(team0) entered disabled state [ 407.690745][T12424] team0 (unregistering): left allmulticast mode [ 407.697196][T12424] team_slave_0: left allmulticast mode [ 407.702969][T12424] team_slave_1: left allmulticast mode [ 407.708556][T12424] team0 (unregistering): left promiscuous mode [ 407.715749][T12424] team_slave_0: left promiscuous mode [ 407.721537][T12424] team_slave_1: left promiscuous mode [ 407.727481][T12424] bridge0: port 2(team0) entered disabled state [ 407.774195][T12424] team0 (unregistering): Port device team_slave_0 removed [ 407.904617][T12424] team0 (unregistering): Port device team_slave_1 removed [ 408.839572][T12464] netlink: 'syz.3.1909': attribute type 9 has an invalid length. [ 408.858855][T12464] __nla_validate_parse: 5 callbacks suppressed [ 408.858871][T12464] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1909'. [ 408.959130][T12469] netlink: 'syz.3.1909': attribute type 9 has an invalid length. [ 408.967603][T12469] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1909'. [ 409.186650][T12476] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 409.278919][T12476] team0 (unregistering): Port device team_slave_1 removed [ 409.650452][T12476] team0 (unregistering): Port device bond0 removed [ 410.275697][T12496] netlink: 'syz.0.1918': attribute type 29 has an invalid length. [ 410.365312][T12496] netlink: 'syz.0.1918': attribute type 29 has an invalid length. [ 410.451129][T12496] netlink: 'syz.0.1918': attribute type 29 has an invalid length. [ 410.501155][T12496] netlink: 'syz.0.1918': attribute type 29 has an invalid length. [ 410.584309][T12496] netlink: 'syz.0.1918': attribute type 29 has an invalid length. [ 410.785158][T12506] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1921'. [ 412.436840][T12540] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1930'. [ 412.454012][T12540] openvswitch: netlink: Flow key attr not present in new flow. [ 412.656827][T12544] netlink: 'syz.1.1934': attribute type 10 has an invalid length. [ 412.665610][T12544] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1934'. [ 412.964270][T12555] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1940'. [ 414.074144][T12590] netlink: 'syz.2.1950': attribute type 2 has an invalid length. [ 414.604335][T12614] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 414.622039][T12614] netlink: 'syz.3.1955': attribute type 29 has an invalid length. [ 414.685472][T12614] netlink: 'syz.3.1955': attribute type 29 has an invalid length. [ 414.723989][T12620] netlink: 'syz.3.1955': attribute type 29 has an invalid length. [ 414.744672][T12614] netlink: 'syz.3.1955': attribute type 29 has an invalid length. [ 414.759639][T12614] netlink: 'syz.3.1955': attribute type 29 has an invalid length. [ 414.818888][T12616] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 414.865228][T12619] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1957'. [ 414.882035][T12616] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1956'. [ 414.931646][T12616] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1956'. [ 415.293241][T12637] netlink: 'syz.3.1961': attribute type 2 has an invalid length. [ 415.955665][T12660] can: request_module (can-proto-5) failed. [ 417.102800][T12695] netlink: 'syz.2.1983': attribute type 29 has an invalid length. [ 418.714561][T12749] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2003'. [ 418.757631][T12749] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.2003'. [ 419.067937][T12764] nla_validate_range_unsigned: 25 callbacks suppressed [ 419.067973][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.090150][T12769] validate_nla: 2 callbacks suppressed [ 419.090167][T12769] netlink: 'syz.2.2010': attribute type 21 has an invalid length. [ 419.100580][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.112976][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.125151][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.134258][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.142733][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.151240][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.159973][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.168700][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.179434][T12764] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 419.209233][T12764] netlink: 'syz.1.2006': attribute type 4 has an invalid length. [ 419.231301][T12764] netlink: 'syz.1.2006': attribute type 5 has an invalid length. [ 419.257991][T12764] netlink: 193756 bytes leftover after parsing attributes in process `syz.1.2006'. [ 420.173472][T12788] netlink: 'syz.0.2016': attribute type 6 has an invalid length. [ 420.186760][T12788] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2016'. [ 420.201132][T12788] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2016'. [ 420.229942][T12788] openvswitch: netlink: Duplicate key (type 0). [ 420.318899][T12793] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2018'. [ 420.332049][T12793] openvswitch: netlink: Key type 8208 is out of range max 32 [ 420.461942][T12793] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2018'. [ 420.480599][T12793] bridge_slave_1: default FDB implementation only supports local addresses [ 420.816679][T12801] sit0: entered promiscuous mode [ 422.186007][T12850] netlink: 'syz.1.2033': attribute type 39 has an invalid length. [ 422.264843][T12852] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2033'. [ 422.929301][T12876] netlink: 'syz.2.2041': attribute type 4 has an invalid length. [ 422.937920][T12876] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2041'. [ 423.025516][T12884] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2041'. [ 423.037722][T12884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.497899][T12907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.506596][T12907] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2052'. [ 423.522018][T12909] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.547853][T12911] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2052'. [ 423.615134][T12916] netlink: 'syz.2.2053': attribute type 10 has an invalid length. [ 423.738100][T12922] netlink: 'syz.2.2055': attribute type 6 has an invalid length. [ 423.746063][T12922] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2055'. [ 423.944838][T12929] netlink: 'syz.2.2058': attribute type 10 has an invalid length. [ 424.275775][T12943] netlink: 'syz.0.2063': attribute type 8 has an invalid length. [ 424.284096][T12943] netlink: 'syz.0.2063': attribute type 6 has an invalid length. [ 424.340111][T12945] netlink: 'syz.3.2064': attribute type 2 has an invalid length. [ 424.350530][T12945] netlink: 'syz.3.2064': attribute type 1 has an invalid length. [ 424.916064][T12972] netlink: 'syz.2.2073': attribute type 3 has an invalid length. [ 424.925402][T12972] netlink: 'syz.2.2073': attribute type 4 has an invalid length. [ 425.220910][T12985] netlink: 'syz.2.2076': attribute type 3 has an invalid length. [ 425.230509][T12985] __nla_validate_parse: 4 callbacks suppressed [ 425.230523][T12985] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2076'. [ 427.961666][T13055] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2096'. [ 428.102154][T13058] netlink: 'syz.0.2098': attribute type 25 has an invalid length. [ 428.130558][T13058] netlink: 'syz.0.2098': attribute type 9 has an invalid length. [ 428.161491][T13058] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2098'. [ 428.380407][T13065] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2102'. [ 429.631519][T13071] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2104'. [ 429.661592][T13071] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 429.705835][T13091] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2110'. [ 431.507221][T13130] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.2123'. [ 431.552961][T13130] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 431.591577][T13130] netlink: 'syz.3.2123': attribute type 2 has an invalid length. [ 431.599682][T13130] netlink: 'syz.3.2123': attribute type 3 has an invalid length. [ 431.641531][T13130] netlink: 'syz.3.2123': attribute type 4 has an invalid length. [ 432.060293][T13149] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2130'. [ 432.603129][T13159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2133'. [ 434.051628][T13183] netlink: 'syz.1.2141': attribute type 10 has an invalid length. [ 434.077004][T13183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2141'. [ 434.139572][T13183] batman_adv: batadv0: Adding interface: veth0_vlan [ 434.152541][T13183] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.180793][T13183] batman_adv: batadv0: Interface activated: veth0_vlan [ 435.793034][T13226] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2158'. [ 435.805533][T13231] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2160'. [ 437.190791][T13241] netlink: 'syz.1.2162': attribute type 9 has an invalid length. [ 437.198855][T13241] netlink: 'syz.1.2162': attribute type 23 has an invalid length. [ 437.207882][T13241] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.2162'. [ 437.914857][T13242] netlink: 'syz.1.2162': attribute type 9 has an invalid length. [ 437.939648][T13242] netlink: 'syz.1.2162': attribute type 23 has an invalid length. [ 437.951688][T13242] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.2162'. [ 439.243136][T13299] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2181'. [ 439.261217][T13297] netlink: 'syz.0.2179': attribute type 10 has an invalid length. [ 439.399307][T13297] bridge0: port 4(veth0_to_bridge) entered disabled state [ 439.418611][T13297] bridge0: port 2(dummy0) entered disabled state [ 439.431825][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.484380][T13297] : (slave bridge0): Releasing backup interface [ 439.750396][T13301] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 441.144301][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.152484][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.848833][T13338] netlink: 'syz.1.2191': attribute type 3 has an invalid length. [ 441.871545][T13338] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2191'. [ 442.339626][T13346] netlink: 'syz.3.2193': attribute type 13 has an invalid length. [ 442.362174][T13346] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2193'. [ 442.421869][T13345] delete_channel: no stack [ 442.956208][T13367] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 443.158943][T13375] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 443.207909][T13375] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2205'. [ 443.221903][T13375] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 443.230313][T13375] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 443.600298][ T8042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.611765][ T8042] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.627508][ T8042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.642563][ T8042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.663670][ T8042] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 443.683395][ T8042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.949107][ T8085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.103147][ T8085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.271146][ T8085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.380849][ T8085] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.559056][T13421] netlink: 'syz.3.2217': attribute type 10 has an invalid length. [ 444.601675][T13421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2217'. [ 444.651661][T13388] chnl_net:caif_netlink_parms(): no params data found [ 444.821632][T13429] netlink: 'syz.3.2220': attribute type 12 has an invalid length. [ 444.829509][T13429] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2220'. [ 445.063606][T13429] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2220'. [ 445.257125][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.275157][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.292163][T13388] bridge_slave_0: entered allmulticast mode [ 445.318032][T13388] bridge_slave_0: entered promiscuous mode [ 445.350491][T13449] netlink: 'syz.2.2224': attribute type 23 has an invalid length. [ 445.791730][ T5780] Bluetooth: hci4: command tx timeout [ 446.211879][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.231701][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.239047][T13388] bridge_slave_1: entered allmulticast mode [ 446.268558][T13388] bridge_slave_1: entered promiscuous mode [ 446.713248][T13388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.730535][T13388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.920064][T13388] team0: Port device team_slave_0 added [ 446.939789][T13388] team0: Port device team_slave_1 added [ 447.084096][T13388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.091091][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.138946][T13388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.205384][T13388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.221571][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.290802][T13388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.694152][T13388] hsr_slave_0: entered promiscuous mode [ 447.701059][T13388] hsr_slave_1: entered promiscuous mode [ 447.715816][T13388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.725064][T13388] Cannot create hsr debugfs directory [ 447.861933][ T5780] Bluetooth: hci4: command tx timeout [ 447.942676][T13526] syzkaller0: entered promiscuous mode [ 447.948766][T13526] syzkaller0: entered allmulticast mode [ 448.919031][ T8085] vlan0: left allmulticast mode [ 448.955177][ T8085] vlan0: left promiscuous mode [ 448.961616][ T8085] À: port 1(vlan0) entered disabled state [ 448.995047][ T8085] hsr_slave_0: left promiscuous mode [ 449.029854][ T8085] hsr_slave_1: left promiscuous mode [ 449.065493][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.086019][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.123243][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.171339][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.198318][ T8085] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 449.217814][ T8085] batman_adv: batadv0: Removing interface: virt_wifi0 [ 449.237276][ T8085] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 449.247299][ T8085] batman_adv: batadv0: Removing interface: veth0_vlan [ 449.256890][ T8085] veth0_to_bridge: left allmulticast mode [ 449.266956][ T8085] veth0_to_bridge: left promiscuous mode [ 449.274276][ T8085] bridge0: port 4(veth0_to_bridge) entered disabled state [ 449.289292][ T8085] batadv0: left allmulticast mode [ 449.294612][ T8085] batadv0: left promiscuous mode [ 449.299710][ T8085] bridge0: port 3(batadv0) entered disabled state [ 449.310006][ T8085] dummy0: left allmulticast mode [ 449.333404][ T8085] dummy0: left promiscuous mode [ 449.338481][ T8085] bridge0: port 2(dummy0) entered disabled state [ 449.393208][ T8085] bridge_slave_0: left allmulticast mode [ 449.398911][ T8085] bridge_slave_0: left promiscuous mode [ 449.424756][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.570004][ T8085] veth1_vlan: left promiscuous mode [ 449.586904][ T8085] veth0_vlan: left promiscuous mode [ 449.944612][ T5780] Bluetooth: hci4: command tx timeout [ 450.387993][ T8085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.743840][ T8085] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 450.752886][ T8085] bond0 (unregistering): Released all slaves [ 451.051758][T13388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.078578][T13599] netlink: 'syz.0.2254': attribute type 29 has an invalid length. [ 451.090012][T13602] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2255'. [ 451.120247][T13606] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2254'. [ 451.126825][T13602] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 451.188492][T13388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.199762][T13599] netlink: 'syz.0.2254': attribute type 29 has an invalid length. [ 451.238016][T13388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 451.260811][T13606] netlink: 'syz.0.2254': attribute type 29 has an invalid length. [ 451.301727][T13388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 451.564516][ T5780] Bluetooth: hci1: unexpected subevent 0x0a length: 15 < 30 [ 451.574161][T13388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.636891][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.696682][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.703923][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.735956][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.743202][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.032018][ T5780] Bluetooth: hci4: command tx timeout [ 452.641618][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.722246][T13657] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2265'. [ 452.733643][T13654] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2265'. [ 452.785892][T13388] veth0_vlan: entered promiscuous mode [ 452.802591][T13388] veth1_vlan: entered promiscuous mode [ 452.849468][T13388] veth0_macvtap: entered promiscuous mode [ 452.869985][T13388] veth1_macvtap: entered promiscuous mode [ 452.933138][T13388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.969678][T13388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.988071][T13388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.005680][T13388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.019163][T13388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.028972][T13388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.243194][ T8086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.264755][ T8086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.315950][T13675] netlink: 'syz.3.2271': attribute type 11 has an invalid length. [ 453.332522][T13675] netlink: 159388 bytes leftover after parsing attributes in process `syz.3.2271'. [ 453.333206][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.373889][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.353762][T13712] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2278'. [ 454.768766][T13729] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2282'. [ 454.869093][T13729] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2282'. [ 454.896739][T13729] hsr_slave_0: left promiscuous mode [ 454.920229][T13729] hsr_slave_1: left promiscuous mode [ 455.076472][T13743] netlink: 'syz.2.2286': attribute type 33 has an invalid length. [ 455.124447][T13743] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2286'. [ 455.274827][T13751] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2287'. [ 455.322870][T13751] netlink: 'syz.0.2287': attribute type 3 has an invalid length. [ 455.330810][T13751] netlink: 'syz.0.2287': attribute type 6 has an invalid length. [ 455.505664][T13758] : renamed from bond_slave_0 [ 457.440050][T13801] __nla_validate_parse: 2 callbacks suppressed [ 457.468968][T13801] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2305'. [ 457.483001][T13801] netlink: del zone limit has 4 unknown bytes [ 458.019548][T13827] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.2309'. [ 458.178130][T13830] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2310'. [ 458.247856][T13834] FAULT_INJECTION: forcing a failure. [ 458.247856][T13834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.262587][T13834] CPU: 1 PID: 13834 Comm: syz.2.2312 Not tainted syzkaller #0 [ 458.270172][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.280317][T13834] Call Trace: [ 458.283650][T13834] [ 458.286636][T13834] dump_stack_lvl+0x18c/0x250 [ 458.291400][T13834] ? show_regs_print_info+0x20/0x20 [ 458.296668][T13834] ? load_image+0x420/0x420 [ 458.301252][T13834] ? __might_fault+0xaa/0x120 [ 458.305994][T13834] ? __lock_acquire+0x7eb0/0x7eb0 [ 458.311102][T13834] should_fail_ex+0x394/0x4c0 [ 458.315874][T13834] _copy_from_user+0x2f/0xe0 [ 458.320530][T13834] ___sys_sendmsg+0x1c7/0x360 [ 458.325266][T13834] ? get_pid_task+0x20/0x1e0 [ 458.329939][T13834] ? __sys_sendmsg+0x2b0/0x2b0 [ 458.334884][T13834] ? __lock_acquire+0x7eb0/0x7eb0 [ 458.340110][T13834] __se_sys_sendmsg+0x1d0/0x2c0 [ 458.345037][T13834] ? __x64_sys_sendmsg+0x80/0x80 [ 458.350123][T13834] ? lockdep_hardirqs_on+0x98/0x150 [ 458.355399][T13834] do_syscall_64+0x55/0xb0 [ 458.359859][T13834] ? clear_bhb_loop+0x40/0x90 [ 458.364590][T13834] ? clear_bhb_loop+0x40/0x90 [ 458.369333][T13834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.375281][T13834] RIP: 0033:0x7f49bdd9e1d9 [ 458.379750][T13834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.399407][T13834] RSP: 002b:00007f49beca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.407887][T13834] RAX: ffffffffffffffda RBX: 00007f49be025fa0 RCX: 00007f49bdd9e1d9 [ 458.415907][T13834] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 458.423926][T13834] RBP: 00007f49beca0090 R08: 0000000000000000 R09: 0000000000000000 [ 458.431943][T13834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.439964][T13834] R13: 00007f49be026038 R14: 00007f49be025fa0 R15: 00007ffed2f1ff48 [ 458.448082][T13834] [ 458.484129][T13836] sit0: entered allmulticast mode [ 458.665492][T13840] netlink: 'syz.3.2314': attribute type 19 has an invalid length. [ 458.973026][T13857] FAULT_INJECTION: forcing a failure. [ 458.973026][T13857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.988012][T13857] CPU: 1 PID: 13857 Comm: syz.0.2322 Not tainted syzkaller #0 [ 458.995592][T13857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.005743][T13857] Call Trace: [ 459.009107][T13857] [ 459.012128][T13857] dump_stack_lvl+0x18c/0x250 [ 459.016928][T13857] ? show_regs_print_info+0x20/0x20 [ 459.022230][T13857] ? load_image+0x420/0x420 [ 459.026824][T13857] ? __lock_acquire+0x7eb0/0x7eb0 [ 459.031920][T13857] should_fail_ex+0x394/0x4c0 [ 459.036655][T13857] _copy_from_user+0x2f/0xe0 [ 459.041279][T13857] __copy_msghdr+0x388/0x560 [ 459.045935][T13857] ___sys_sendmsg+0x214/0x360 [ 459.050640][T13857] ? get_pid_task+0x20/0x1e0 [ 459.055329][T13857] ? __sys_sendmsg+0x2b0/0x2b0 [ 459.060378][T13857] ? __lock_acquire+0x7eb0/0x7eb0 [ 459.065722][T13857] __se_sys_sendmsg+0x1d0/0x2c0 [ 459.070715][T13857] ? __x64_sys_sendmsg+0x80/0x80 [ 459.075901][T13857] ? lockdep_hardirqs_on+0x98/0x150 [ 459.081243][T13857] do_syscall_64+0x55/0xb0 [ 459.085758][T13857] ? clear_bhb_loop+0x40/0x90 [ 459.090546][T13857] ? clear_bhb_loop+0x40/0x90 [ 459.095315][T13857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.101245][T13857] RIP: 0033:0x7fa53f39e1d9 [ 459.105699][T13857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.125360][T13857] RSP: 002b:00007fa5401c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.133863][T13857] RAX: ffffffffffffffda RBX: 00007fa53f625fa0 RCX: 00007fa53f39e1d9 [ 459.141893][T13857] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 459.149926][T13857] RBP: 00007fa5401c2090 R08: 0000000000000000 R09: 0000000000000000 [ 459.157949][T13857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.165978][T13857] R13: 00007fa53f626038 R14: 00007fa53f625fa0 R15: 00007ffc8d5ca7d8 [ 459.174116][T13857] [ 459.899796][T13888] FAULT_INJECTION: forcing a failure. [ 459.899796][T13888] name failslab, interval 1, probability 0, space 0, times 0 [ 459.925493][T13888] CPU: 1 PID: 13888 Comm: syz.3.2332 Not tainted syzkaller #0 [ 459.933085][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 459.943236][T13888] Call Trace: [ 459.946612][T13888] [ 459.949641][T13888] dump_stack_lvl+0x18c/0x250 [ 459.954447][T13888] ? show_regs_print_info+0x20/0x20 [ 459.959760][T13888] ? load_image+0x420/0x420 [ 459.964399][T13888] ? __might_sleep+0xe0/0xe0 [ 459.969111][T13888] ? __lock_acquire+0x7eb0/0x7eb0 [ 459.974290][T13888] should_fail_ex+0x394/0x4c0 [ 459.979131][T13888] should_failslab+0x9/0x20 [ 459.983736][T13888] slab_pre_alloc_hook+0x59/0x300 [ 459.988872][T13888] ? sock_kmalloc+0x96/0xf0 [ 459.993497][T13888] ? sock_kmalloc+0x96/0xf0 [ 459.998102][T13888] __kmem_cache_alloc_node+0x53/0x250 [ 460.003626][T13888] ? sock_kmalloc+0x96/0xf0 [ 460.008230][T13888] __kmalloc+0xa7/0x240 [ 460.012532][T13888] sock_kmalloc+0x96/0xf0 [ 460.016990][T13888] ____sys_sendmsg+0x1d4/0x980 [ 460.021923][T13888] ? __asan_memset+0x22/0x40 [ 460.026631][T13888] ? __sys_sendmsg_sock+0x30/0x30 [ 460.031752][T13888] ? __import_iovec+0x3fa/0x850 [ 460.036784][T13888] ? import_iovec+0x73/0xa0 [ 460.041434][T13888] ___sys_sendmsg+0x2a6/0x360 [ 460.046224][T13888] ? get_pid_task+0x20/0x1e0 [ 460.050960][T13888] ? __sys_sendmsg+0x2b0/0x2b0 [ 460.056002][T13888] ? __lock_acquire+0x7eb0/0x7eb0 [ 460.061344][T13888] __se_sys_sendmsg+0x1d0/0x2c0 [ 460.066333][T13888] ? __x64_sys_sendmsg+0x80/0x80 [ 460.071532][T13888] ? lockdep_hardirqs_on+0x98/0x150 [ 460.076882][T13888] do_syscall_64+0x55/0xb0 [ 460.081390][T13888] ? clear_bhb_loop+0x40/0x90 [ 460.086166][T13888] ? clear_bhb_loop+0x40/0x90 [ 460.090956][T13888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.096951][T13888] RIP: 0033:0x7f1a75f9e1d9 [ 460.101480][T13888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.121194][T13888] RSP: 002b:00007f1a76ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.129738][T13888] RAX: ffffffffffffffda RBX: 00007f1a76225fa0 RCX: 00007f1a75f9e1d9 [ 460.137815][T13888] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 460.145889][T13888] RBP: 00007f1a76ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 460.153961][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.162038][T13888] R13: 00007f1a76226038 R14: 00007f1a76225fa0 R15: 00007ffe76645398 [ 460.170239][T13888] [ 460.195954][T13892] netlink: 'syz.1.2333': attribute type 3 has an invalid length. [ 460.205471][T13892] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2333'. [ 461.005385][T13928] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2341'. [ 461.033797][T13930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2341'. [ 461.259734][T13938] FAULT_INJECTION: forcing a failure. [ 461.259734][T13938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.278256][T13938] CPU: 1 PID: 13938 Comm: syz.3.2344 Not tainted syzkaller #0 [ 461.285843][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.296001][T13938] Call Trace: [ 461.299370][T13938] [ 461.302397][T13938] dump_stack_lvl+0x18c/0x250 [ 461.307204][T13938] ? show_regs_print_info+0x20/0x20 [ 461.312511][T13938] ? load_image+0x420/0x420 [ 461.317148][T13938] ? __might_fault+0xaa/0x120 [ 461.321959][T13938] ? __lock_acquire+0x7eb0/0x7eb0 [ 461.327096][T13938] ? __virt_addr_valid+0x10c/0x380 [ 461.332350][T13938] should_fail_ex+0x394/0x4c0 [ 461.337181][T13938] _copy_from_user+0x2f/0xe0 [ 461.341892][T13938] ____sys_sendmsg+0x329/0x980 [ 461.346852][T13938] ? __sys_sendmsg_sock+0x30/0x30 [ 461.351988][T13938] ? __import_iovec+0x3fa/0x850 [ 461.357027][T13938] ? import_iovec+0x73/0xa0 [ 461.361669][T13938] ___sys_sendmsg+0x2a6/0x360 [ 461.366445][T13938] ? get_pid_task+0x20/0x1e0 [ 461.371183][T13938] ? __sys_sendmsg+0x2b0/0x2b0 [ 461.376226][T13938] ? __lock_acquire+0x7eb0/0x7eb0 [ 461.381549][T13938] __se_sys_sendmsg+0x1d0/0x2c0 [ 461.386542][T13938] ? __x64_sys_sendmsg+0x80/0x80 [ 461.391719][T13938] ? lockdep_hardirqs_on+0x98/0x150 [ 461.397066][T13938] do_syscall_64+0x55/0xb0 [ 461.401581][T13938] ? clear_bhb_loop+0x40/0x90 [ 461.406356][T13938] ? clear_bhb_loop+0x40/0x90 [ 461.411155][T13938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.417165][T13938] RIP: 0033:0x7f1a75f9e1d9 [ 461.421696][T13938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.441406][T13938] RSP: 002b:00007f1a76ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.449962][T13938] RAX: ffffffffffffffda RBX: 00007f1a76225fa0 RCX: 00007f1a75f9e1d9 [ 461.458024][T13938] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 461.466051][T13938] RBP: 00007f1a76ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 461.474072][T13938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.482093][T13938] R13: 00007f1a76226038 R14: 00007f1a76225fa0 R15: 00007ffe76645398 [ 461.490209][T13938] [ 461.661722][T13954] mac80211_hwsim hwsim35 ..ãc¤±: renamed from wlan1 (while UP) [ 462.220305][T13967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 462.492030][T13967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 462.516960][T13971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 462.549540][T13967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2352'. [ 462.637054][T13980] FAULT_INJECTION: forcing a failure. [ 462.637054][T13980] name failslab, interval 1, probability 0, space 0, times 0 [ 462.652284][T13980] CPU: 0 PID: 13980 Comm: syz.3.2355 Not tainted syzkaller #0 [ 462.659857][T13980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.670005][T13980] Call Trace: [ 462.673375][T13980] [ 462.676399][T13980] dump_stack_lvl+0x18c/0x250 [ 462.681216][T13980] ? show_regs_print_info+0x20/0x20 [ 462.686521][T13980] ? load_image+0x420/0x420 [ 462.691160][T13980] ? __lock_acquire+0x7eb0/0x7eb0 [ 462.696312][T13980] ? tomoyo_write_log2+0x24f/0x910 [ 462.701563][T13980] should_fail_ex+0x394/0x4c0 [ 462.706344][T13980] should_failslab+0x9/0x20 [ 462.710882][T13980] slab_pre_alloc_hook+0x59/0x300 [ 462.715978][T13980] ? ip_options_get+0x50/0x560 [ 462.720789][T13980] ? ip_options_get+0x50/0x560 [ 462.725597][T13980] __kmem_cache_alloc_node+0x53/0x250 [ 462.731058][T13980] ? ip_options_get+0x50/0x560 [ 462.735879][T13980] __kmalloc+0xa7/0x240 [ 462.740117][T13980] ip_options_get+0x50/0x560 [ 462.744778][T13980] ? aa_label_sk_perm+0x500/0x6a0 [ 462.749857][T13980] ? tomoyo_check_inet_address+0x27d/0x910 [ 462.755741][T13980] ip_cmsg_send+0x591/0xa70 [ 462.760386][T13980] raw_sendmsg+0x55d/0x1ba0 [ 462.764969][T13980] ? tomoyo_check_inet_address+0x27d/0x910 [ 462.770882][T13980] ? compat_raw_ioctl+0x70/0x70 [ 462.775831][T13980] ? aa_sk_perm+0x83c/0x970 [ 462.780486][T13980] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 462.786956][T13980] ? aa_sock_msg_perm+0x94/0x150 [ 462.791961][T13980] ? sock_rps_record_flow+0x19/0x3f0 [ 462.797319][T13980] ? inet_sendmsg+0x7e/0x2a0 [ 462.801958][T13980] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 462.807296][T13980] ? inet_send_prepare+0x250/0x250 [ 462.812475][T13980] ____sys_sendmsg+0x61b/0x980 [ 462.817351][T13980] ? __sys_sendmsg_sock+0x30/0x30 [ 462.822428][T13980] ? __import_iovec+0x3fa/0x850 [ 462.827389][T13980] ? import_iovec+0x73/0xa0 [ 462.831978][T13980] ___sys_sendmsg+0x2a6/0x360 [ 462.836785][T13980] ? __sys_sendmsg+0x2b0/0x2b0 [ 462.841757][T13980] ? trace_call_bpf+0xc3/0x6c0 [ 462.846739][T13980] __se_sys_sendmsg+0x1d0/0x2c0 [ 462.851653][T13980] ? perf_trace_preemptirq_template+0x269/0x330 [ 462.857977][T13980] ? __x64_sys_sendmsg+0x80/0x80 [ 462.863071][T13980] ? lockdep_hardirqs_on+0x98/0x150 [ 462.868356][T13980] do_syscall_64+0x55/0xb0 [ 462.872821][T13980] ? clear_bhb_loop+0x40/0x90 [ 462.877548][T13980] ? clear_bhb_loop+0x40/0x90 [ 462.882289][T13980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.888238][T13980] RIP: 0033:0x7f1a75f9e1d9 [ 462.892717][T13980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.912383][T13980] RSP: 002b:00007f1a76ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.920868][T13980] RAX: ffffffffffffffda RBX: 00007f1a76225fa0 RCX: 00007f1a75f9e1d9 [ 462.928889][T13980] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 462.936907][T13980] RBP: 00007f1a76ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 462.944925][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.952943][T13980] R13: 00007f1a76226038 R14: 00007f1a76225fa0 R15: 00007ffe76645398 [ 462.961052][T13980] [ 464.446420][T14032] FAULT_INJECTION: forcing a failure. [ 464.446420][T14032] name failslab, interval 1, probability 0, space 0, times 0 [ 464.465783][T14032] CPU: 0 PID: 14032 Comm: syz.1.2367 Not tainted syzkaller #0 [ 464.473356][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.483470][T14032] Call Trace: [ 464.486802][T14032] [ 464.489787][T14032] dump_stack_lvl+0x18c/0x250 [ 464.494557][T14032] ? show_regs_print_info+0x20/0x20 [ 464.499819][T14032] ? load_image+0x420/0x420 [ 464.504402][T14032] ? perf_trace_lock_acquire+0x342/0x400 [ 464.510142][T14032] should_fail_ex+0x394/0x4c0 [ 464.514916][T14032] should_failslab+0x9/0x20 [ 464.519471][T14032] slab_pre_alloc_hook+0x59/0x300 [ 464.524588][T14032] kmem_cache_alloc+0x5a/0x2c0 [ 464.529426][T14032] ? dst_alloc+0x105/0x170 [ 464.533930][T14032] dst_alloc+0x105/0x170 [ 464.538253][T14032] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 464.544450][T14032] ? ip_route_output_key_hash+0x13d/0x330 [ 464.550233][T14032] ip_route_output_key_hash+0x1f3/0x330 [ 464.555861][T14032] ? ip_route_input_rcu+0x3120/0x3120 [ 464.561286][T14032] ? aa_label_sk_perm+0x500/0x6a0 [ 464.566405][T14032] ? ip_cmsg_send+0x9c0/0xa70 [ 464.571193][T14032] ip_route_output_flow+0x2a/0x150 [ 464.576355][T14032] ? security_sk_classify_flow+0x7b/0x90 [ 464.582068][T14032] raw_sendmsg+0x124a/0x1ba0 [ 464.586805][T14032] ? compat_raw_ioctl+0x70/0x70 [ 464.591753][T14032] ? aa_sk_perm+0x83c/0x970 [ 464.596409][T14032] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 464.602881][T14032] ? aa_sock_msg_perm+0x94/0x150 [ 464.607881][T14032] ? sock_rps_record_flow+0x19/0x3f0 [ 464.613240][T14032] ? inet_sendmsg+0x7e/0x2a0 [ 464.617874][T14032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 464.623214][T14032] ? inet_send_prepare+0x250/0x250 [ 464.628391][T14032] ____sys_sendmsg+0x61b/0x980 [ 464.633273][T14032] ? __sys_sendmsg_sock+0x30/0x30 [ 464.638350][T14032] ? __import_iovec+0x3fa/0x850 [ 464.643314][T14032] ? import_iovec+0x73/0xa0 [ 464.647900][T14032] ___sys_sendmsg+0x2a6/0x360 [ 464.652631][T14032] ? get_pid_task+0x20/0x1e0 [ 464.657307][T14032] ? __sys_sendmsg+0x2b0/0x2b0 [ 464.662263][T14032] ? __lock_acquire+0x7eb0/0x7eb0 [ 464.667497][T14032] __se_sys_sendmsg+0x1d0/0x2c0 [ 464.672430][T14032] ? __x64_sys_sendmsg+0x80/0x80 [ 464.677527][T14032] ? lockdep_hardirqs_on+0x98/0x150 [ 464.682805][T14032] do_syscall_64+0x55/0xb0 [ 464.687266][T14032] ? clear_bhb_loop+0x40/0x90 [ 464.692007][T14032] ? clear_bhb_loop+0x40/0x90 [ 464.696772][T14032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.702730][T14032] RIP: 0033:0x7f3f3779e1d9 [ 464.707213][T14032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.726879][T14032] RSP: 002b:00007f3f3867d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.735363][T14032] RAX: ffffffffffffffda RBX: 00007f3f37a25fa0 RCX: 00007f3f3779e1d9 [ 464.743382][T14032] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 464.751406][T14032] RBP: 00007f3f3867d090 R08: 0000000000000000 R09: 0000000000000000 [ 464.759438][T14032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.767457][T14032] R13: 00007f3f37a26038 R14: 00007f3f37a25fa0 R15: 00007ffdde10bfb8 [ 464.775575][T14032] [ 466.352895][T14070] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 467.229991][T14077] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2382'. [ 467.239326][T14077] openvswitch: netlink: Flow actions attr not present in new flow. [ 467.717487][T14102] FAULT_INJECTION: forcing a failure. [ 467.717487][T14102] name failslab, interval 1, probability 0, space 0, times 0 [ 467.744529][T14102] CPU: 1 PID: 14102 Comm: syz.2.2389 Not tainted syzkaller #0 [ 467.752116][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 467.762259][T14102] Call Trace: [ 467.765606][T14102] [ 467.768600][T14102] dump_stack_lvl+0x18c/0x250 [ 467.773370][T14102] ? show_regs_print_info+0x20/0x20 [ 467.778637][T14102] ? load_image+0x420/0x420 [ 467.783232][T14102] ? __might_sleep+0xe0/0xe0 [ 467.787894][T14102] ? __lock_acquire+0x7eb0/0x7eb0 [ 467.793014][T14102] should_fail_ex+0x394/0x4c0 [ 467.797794][T14102] should_failslab+0x9/0x20 [ 467.802354][T14102] slab_pre_alloc_hook+0x59/0x300 [ 467.807430][T14102] ? mark_lock+0x94/0x320 [ 467.811829][T14102] ? ip_setup_cork+0x222/0x840 [ 467.816666][T14102] __kmem_cache_alloc_node+0x53/0x250 [ 467.822136][T14102] ? ip_setup_cork+0x222/0x840 [ 467.826970][T14102] kmalloc_trace+0x2a/0xe0 [ 467.831467][T14102] ip_setup_cork+0x222/0x840 [ 467.836177][T14102] ip_append_data+0x135/0x180 [ 467.840928][T14102] ? raw_send_hdrinc+0x1150/0x1150 [ 467.846128][T14102] raw_sendmsg+0x155e/0x1ba0 [ 467.850891][T14102] ? compat_raw_ioctl+0x70/0x70 [ 467.855852][T14102] ? aa_sk_perm+0x83c/0x970 [ 467.860521][T14102] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 467.866994][T14102] ? aa_sock_msg_perm+0x94/0x150 [ 467.872004][T14102] ? sock_rps_record_flow+0x19/0x3f0 [ 467.877373][T14102] ? inet_sendmsg+0x7e/0x2a0 [ 467.882014][T14102] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 467.887357][T14102] ? inet_send_prepare+0x250/0x250 [ 467.892546][T14102] ____sys_sendmsg+0x61b/0x980 [ 467.897433][T14102] ? __sys_sendmsg_sock+0x30/0x30 [ 467.902513][T14102] ? __import_iovec+0x3fa/0x850 [ 467.907485][T14102] ? import_iovec+0x73/0xa0 [ 467.912083][T14102] ___sys_sendmsg+0x2a6/0x360 [ 467.916819][T14102] ? get_pid_task+0x20/0x1e0 [ 467.921505][T14102] ? __sys_sendmsg+0x2b0/0x2b0 [ 467.926472][T14102] ? __lock_acquire+0x7eb0/0x7eb0 [ 467.931727][T14102] __se_sys_sendmsg+0x1d0/0x2c0 [ 467.936661][T14102] ? __x64_sys_sendmsg+0x80/0x80 [ 467.941784][T14102] ? lockdep_hardirqs_on+0x98/0x150 [ 467.947077][T14102] do_syscall_64+0x55/0xb0 [ 467.951542][T14102] ? clear_bhb_loop+0x40/0x90 [ 467.956269][T14102] ? clear_bhb_loop+0x40/0x90 [ 467.961018][T14102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.966968][T14102] RIP: 0033:0x7f49bdd9e1d9 [ 467.971445][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.991108][T14102] RSP: 002b:00007f49beca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.999592][T14102] RAX: ffffffffffffffda RBX: 00007f49be025fa0 RCX: 00007f49bdd9e1d9 [ 468.007617][T14102] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 468.015640][T14102] RBP: 00007f49beca0090 R08: 0000000000000000 R09: 0000000000000000 [ 468.023665][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.031692][T14102] R13: 00007f49be026038 R14: 00007f49be025fa0 R15: 00007ffed2f1ff48 [ 468.039828][T14102] [ 468.260044][T14116] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2395'. [ 468.336857][T14118] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2394'. [ 469.574694][T14133] FAULT_INJECTION: forcing a failure. [ 469.574694][T14133] name failslab, interval 1, probability 0, space 0, times 0 [ 469.588655][T14133] CPU: 1 PID: 14133 Comm: syz.3.2400 Not tainted syzkaller #0 [ 469.596233][T14133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 469.606392][T14133] Call Trace: [ 469.609764][T14133] [ 469.612804][T14133] dump_stack_lvl+0x18c/0x250 [ 469.617623][T14133] ? show_regs_print_info+0x20/0x20 [ 469.622937][T14133] ? load_image+0x420/0x420 [ 469.627584][T14133] ? __might_sleep+0xe0/0xe0 [ 469.632289][T14133] ? __lock_acquire+0x7eb0/0x7eb0 [ 469.637403][T14133] ? unwind_get_return_address+0x91/0xc0 [ 469.643137][T14133] ? stack_trace_save+0x100/0x100 [ 469.648260][T14133] should_fail_ex+0x394/0x4c0 [ 469.653003][T14133] should_failslab+0x9/0x20 [ 469.657573][T14133] slab_pre_alloc_hook+0x59/0x300 [ 469.662670][T14133] ? stack_trace_save+0xaa/0x100 [ 469.667652][T14133] kmem_cache_alloc_node+0x5e/0x310 [ 469.672879][T14133] ? __alloc_skb+0x103/0x2c0 [ 469.677594][T14133] __alloc_skb+0x103/0x2c0 [ 469.682166][T14133] __ip_append_data+0x2acf/0x3bf0 [ 469.687267][T14133] ? ___sys_sendmsg+0x2a6/0x360 [ 469.692176][T14133] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 469.697298][T14133] ? do_syscall_64+0x55/0xb0 [ 469.702184][T14133] ? raw_send_hdrinc+0x1150/0x1150 [ 469.707510][T14133] ? ip_setup_cork+0x840/0x840 [ 469.712371][T14133] ? ip_setup_cork+0x29b/0x840 [ 469.717292][T14133] ? ip_setup_cork+0x527/0x840 [ 469.722189][T14133] ip_append_data+0x10d/0x180 [ 469.727007][T14133] ? raw_send_hdrinc+0x1150/0x1150 [ 469.732249][T14133] raw_sendmsg+0x155e/0x1ba0 [ 469.737084][T14133] ? compat_raw_ioctl+0x70/0x70 [ 469.742105][T14133] ? aa_sk_perm+0x83c/0x970 [ 469.746810][T14133] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 469.753303][T14133] ? aa_sock_msg_perm+0x94/0x150 [ 469.758328][T14133] ? sock_rps_record_flow+0x19/0x3f0 [ 469.763765][T14133] ? inet_sendmsg+0x7e/0x2a0 [ 469.768473][T14133] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 469.773824][T14133] ? inet_send_prepare+0x250/0x250 [ 469.779010][T14133] ____sys_sendmsg+0x61b/0x980 [ 469.783909][T14133] ? __sys_sendmsg_sock+0x30/0x30 [ 469.788989][T14133] ? __import_iovec+0x3fa/0x850 [ 469.793977][T14133] ? import_iovec+0x73/0xa0 [ 469.798582][T14133] ___sys_sendmsg+0x2a6/0x360 [ 469.803322][T14133] ? get_pid_task+0x20/0x1e0 [ 469.808004][T14133] ? __sys_sendmsg+0x2b0/0x2b0 [ 469.812976][T14133] ? __lock_acquire+0x7eb0/0x7eb0 [ 469.818226][T14133] __se_sys_sendmsg+0x1d0/0x2c0 [ 469.823163][T14133] ? __x64_sys_sendmsg+0x80/0x80 [ 469.828269][T14133] ? lockdep_hardirqs_on+0x98/0x150 [ 469.833560][T14133] do_syscall_64+0x55/0xb0 [ 469.838028][T14133] ? clear_bhb_loop+0x40/0x90 [ 469.842763][T14133] ? clear_bhb_loop+0x40/0x90 [ 469.847512][T14133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.853473][T14133] RIP: 0033:0x7f1a75f9e1d9 [ 469.857973][T14133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.877654][T14133] RSP: 002b:00007f1a76ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.886153][T14133] RAX: ffffffffffffffda RBX: 00007f1a76225fa0 RCX: 00007f1a75f9e1d9 [ 469.894189][T14133] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 469.902227][T14133] RBP: 00007f1a76ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 469.910259][T14133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.918286][T14133] R13: 00007f1a76226038 R14: 00007f1a76225fa0 R15: 00007ffe76645398 [ 469.926422][T14133] [ 469.947695][T14134] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2401'. [ 470.041146][T14145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.064083][T14145] netlink: 'syz.0.2405': attribute type 9 has an invalid length. [ 470.101883][T14145] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2405'. [ 470.266719][T14140] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2403'. [ 471.193698][ T5773] bond0: (slave syz_tun): Releasing backup interface [ 471.237221][ T8042] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.246659][ T8042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.256559][ T8042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.269874][ T8042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.279848][ T8042] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 471.289899][ T8042] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.392076][T14174] syzkaller0: entered promiscuous mode [ 471.397702][T14174] syzkaller0: entered allmulticast mode [ 472.947208][ T1106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.023588][ T1106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.114658][ T1106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.230393][ T1106] bond0: (slave netdevsim0): Releasing backup interface [ 473.258475][ T1106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.382607][ T5780] Bluetooth: hci2: command tx timeout [ 473.444128][T14177] chnl_net:caif_netlink_parms(): no params data found [ 473.647546][T14214] netlink: 'syz.1.2428': attribute type 4 has an invalid length. [ 473.661242][T14214] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2428'. [ 473.680802][T14218] netlink: 'syz.2.2427': attribute type 22 has an invalid length. [ 473.689299][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 473.970803][T14177] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.009549][T14224] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2429'. [ 474.037994][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.071765][T14177] bridge_slave_0: entered allmulticast mode [ 474.079184][T14177] bridge_slave_0: entered promiscuous mode [ 474.346584][T14177] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.395617][T14177] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.433919][T14177] bridge_slave_1: entered allmulticast mode [ 474.455212][T14177] bridge_slave_1: entered promiscuous mode [ 474.508077][T14227] netlink: 'syz.1.2429': attribute type 21 has an invalid length. [ 474.534728][T14227] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2429'. [ 474.770121][T14177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.805449][T14177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.023895][T14177] team0: Port device team_slave_0 added [ 475.042542][T14177] team0: Port device team_slave_1 added [ 475.254792][T14177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.277283][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.305957][T14177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.343725][T14177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.350964][T14177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.377573][T14177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.461838][ T5780] Bluetooth: hci2: command tx timeout [ 475.489514][T14177] hsr_slave_0: entered promiscuous mode [ 475.499381][T14177] hsr_slave_1: entered promiscuous mode [ 476.662164][ T5780] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 476.777953][T14314] syzkaller0: entered promiscuous mode [ 476.783782][T14314] syzkaller0: entered allmulticast mode [ 476.924428][ T1106] hsr_slave_0: left promiscuous mode [ 476.934485][ T1106] veth0_to_bridge: left allmulticast mode [ 476.940270][ T1106] veth0_to_bridge: left promiscuous mode [ 476.946814][ T1106] bridge0: port 3(veth0_to_bridge) entered disabled state [ 476.955867][ T1106] bridge_slave_0: left allmulticast mode [ 476.961689][ T1106] bridge_slave_0: left promiscuous mode [ 476.968629][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.988985][ T1106] veth0_vlan: left promiscuous mode [ 477.102424][ T1106] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 477.461062][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.536014][ T1106] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 477.541669][ T5780] Bluetooth: hci2: command tx timeout [ 477.699869][ T1106] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 477.709489][ T1106] bond0 (unregistering): Released all slaves [ 477.770241][T14177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.401480][T14177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.432242][T14177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.450028][T14177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.622136][ T5780] Bluetooth: hci2: command tx timeout [ 479.847276][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.884377][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.920006][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.927252][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.958598][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.965826][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.441293][T14177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.568257][T14177] veth0_vlan: entered promiscuous mode [ 480.599565][T14177] veth1_vlan: entered promiscuous mode [ 480.656041][T14177] veth0_macvtap: entered promiscuous mode [ 480.676769][T14177] veth1_macvtap: entered promiscuous mode [ 480.724261][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.771566][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.816044][T14177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.855870][T14177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.879972][T14177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.925203][T14177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.983929][T14390] netlink: 'syz.2.2463': attribute type 29 has an invalid length. [ 480.996942][T14177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.019632][T14177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.028880][T14177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.038726][T14177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.055238][T14390] netlink: 'syz.2.2463': attribute type 29 has an invalid length. [ 481.067786][T14392] netlink: 'syz.2.2463': attribute type 29 has an invalid length. [ 481.108990][T14388] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2462'. [ 481.125364][T14394] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2462'. [ 481.147647][T14390] netlink: 'syz.2.2463': attribute type 29 has an invalid length. [ 481.382202][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.422917][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.543720][T14266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.580854][T14403] netlink: 'syz.0.2464': attribute type 4 has an invalid length. [ 481.589756][T14266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.639694][T14403] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2464'. [ 483.094319][ T8042] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 483.104975][ T8042] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 483.113733][ T8042] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 483.153259][ T8042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 483.206439][T14452] netlink: 'syz.3.2473': attribute type 2 has an invalid length. [ 483.215674][T14452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2473'. [ 483.232100][T14452] netlink: 'syz.3.2473': attribute type 2 has an invalid length. [ 483.239874][T14452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2473'. [ 483.263678][ T8042] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 483.272014][ T8042] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 483.468849][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.525577][T14457] netlink: 'syz.1.2476': attribute type 33 has an invalid length. [ 483.533614][T14457] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2476'. [ 483.543482][T14457] `: renamed from ip6tnl0 (while UP) [ 483.552320][T14457] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 483.600475][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.700984][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.729297][T14466] FAULT_INJECTION: forcing a failure. [ 483.729297][T14466] name failslab, interval 1, probability 0, space 0, times 0 [ 483.789057][T14466] CPU: 1 PID: 14466 Comm: syz.1.2479 Not tainted syzkaller #0 [ 483.796679][T14466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 483.806824][T14466] Call Trace: [ 483.810175][T14466] [ 483.813202][T14466] dump_stack_lvl+0x18c/0x250 [ 483.818010][T14466] ? show_regs_print_info+0x20/0x20 [ 483.823315][T14466] ? load_image+0x420/0x420 [ 483.828123][T14466] should_fail_ex+0x394/0x4c0 [ 483.832941][T14466] should_failslab+0x9/0x20 [ 483.837527][T14466] slab_pre_alloc_hook+0x59/0x300 [ 483.842642][T14466] ? nf_hook+0xa2/0x390 [ 483.846938][T14466] kmem_cache_alloc+0x5a/0x2c0 [ 483.851800][T14466] ? skb_clone+0x1eb/0x370 [ 483.856336][T14466] skb_clone+0x1eb/0x370 [ 483.860657][T14466] ? ip_mc_output+0x1d6/0x570 [ 483.865454][T14466] ip_mc_output+0x1e3/0x570 [ 483.870078][T14466] ip_send_skb+0x12f/0x1d0 [ 483.874595][T14466] raw_sendmsg+0x15de/0x1ba0 [ 483.879388][T14466] ? compat_raw_ioctl+0x70/0x70 [ 483.884367][T14466] ? aa_sk_perm+0x83c/0x970 [ 483.889074][T14466] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 483.895580][T14466] ? aa_sock_msg_perm+0x94/0x150 [ 483.900618][T14466] ? sock_rps_record_flow+0x19/0x3f0 [ 483.906037][T14466] ? inet_sendmsg+0x7e/0x2a0 [ 483.910690][T14466] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 483.916057][T14466] ? inet_send_prepare+0x250/0x250 [ 483.921280][T14466] ____sys_sendmsg+0x61b/0x980 [ 483.926196][T14466] ? __sys_sendmsg_sock+0x30/0x30 [ 483.931281][T14466] ? __import_iovec+0x3fa/0x850 [ 483.936293][T14466] ? import_iovec+0x73/0xa0 [ 483.940919][T14466] ___sys_sendmsg+0x2a6/0x360 [ 483.945727][T14466] ? __sys_sendmsg+0x2b0/0x2b0 [ 483.950750][T14466] ? trace_call_bpf+0xc3/0x6c0 [ 483.955795][T14466] __se_sys_sendmsg+0x1d0/0x2c0 [ 483.960738][T14466] ? perf_trace_preemptirq_template+0x269/0x330 [ 483.967081][T14466] ? __x64_sys_sendmsg+0x80/0x80 [ 483.972223][T14466] ? lockdep_hardirqs_on+0x98/0x150 [ 483.977545][T14466] do_syscall_64+0x55/0xb0 [ 483.982032][T14466] ? clear_bhb_loop+0x40/0x90 [ 483.986784][T14466] ? clear_bhb_loop+0x40/0x90 [ 483.991550][T14466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.997521][T14466] RIP: 0033:0x7f3f3779e1d9 [ 484.002027][T14466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.021716][T14466] RSP: 002b:00007f3f3867d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.030221][T14466] RAX: ffffffffffffffda RBX: 00007f3f37a25fa0 RCX: 00007f3f3779e1d9 [ 484.038277][T14466] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 484.046316][T14466] RBP: 00007f3f3867d090 R08: 0000000000000000 R09: 0000000000000000 [ 484.054370][T14466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.062402][T14466] R13: 00007f3f37a26038 R14: 00007f3f37a25fa0 R15: 00007ffdde10bfb8 [ 484.070564][T14466] [ 484.475525][ T42] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.636978][T14446] chnl_net:caif_netlink_parms(): no params data found [ 485.071084][T14446] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.078674][T14446] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.086962][T14446] bridge_slave_0: entered allmulticast mode [ 485.094791][T14446] bridge_slave_0: entered promiscuous mode [ 485.138085][T14446] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.155018][T14446] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.165049][T14446] bridge_slave_1: entered allmulticast mode [ 485.176378][T14446] bridge_slave_1: entered promiscuous mode [ 485.301784][ T8042] Bluetooth: hci1: command tx timeout [ 485.351666][T14446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.386907][T14446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.648246][T14516] FAULT_INJECTION: forcing a failure. [ 485.648246][T14516] name failslab, interval 1, probability 0, space 0, times 0 [ 485.707140][T14516] CPU: 1 PID: 14516 Comm: syz.3.2491 Not tainted syzkaller #0 [ 485.714674][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 485.724762][T14516] Call Trace: [ 485.728067][T14516] [ 485.731044][T14516] dump_stack_lvl+0x18c/0x250 [ 485.735753][T14516] ? show_regs_print_info+0x20/0x20 [ 485.740988][T14516] ? load_image+0x420/0x420 [ 485.745534][T14516] should_fail_ex+0x394/0x4c0 [ 485.750254][T14516] should_failslab+0x9/0x20 [ 485.754793][T14516] slab_pre_alloc_hook+0x59/0x300 [ 485.759864][T14516] kmem_cache_alloc+0x5a/0x2c0 [ 485.764657][T14516] ? dst_alloc+0x105/0x170 [ 485.769091][T14516] dst_alloc+0x105/0x170 [ 485.773344][T14516] rt_dst_clone+0x58/0x680 [ 485.777768][T14516] ip_mc_finish_output+0xea/0x260 [ 485.782806][T14516] ? skb_clone+0x21f/0x370 [ 485.787237][T14516] ip_mc_output+0x254/0x570 [ 485.791753][T14516] ip_send_skb+0x12f/0x1d0 [ 485.796179][T14516] raw_sendmsg+0x15de/0x1ba0 [ 485.800783][T14516] ? compat_raw_ioctl+0x70/0x70 [ 485.805640][T14516] ? aa_sk_perm+0x83c/0x970 [ 485.810180][T14516] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 485.816607][T14516] ? aa_sock_msg_perm+0x94/0x150 [ 485.821559][T14516] ? sock_rps_record_flow+0x19/0x3f0 [ 485.826852][T14516] ? inet_sendmsg+0x7e/0x2a0 [ 485.831447][T14516] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 485.836743][T14516] ? inet_send_prepare+0x250/0x250 [ 485.841861][T14516] ____sys_sendmsg+0x61b/0x980 [ 485.846639][T14516] ? __sys_sendmsg_sock+0x30/0x30 [ 485.851665][T14516] ? __import_iovec+0x3fa/0x850 [ 485.856530][T14516] ? import_iovec+0x73/0xa0 [ 485.861041][T14516] ___sys_sendmsg+0x2a6/0x360 [ 485.865732][T14516] ? __sys_sendmsg+0x2b0/0x2b0 [ 485.870524][T14516] ? trace_call_bpf+0xc3/0x6c0 [ 485.875332][T14516] __se_sys_sendmsg+0x1d0/0x2c0 [ 485.880189][T14516] ? perf_trace_preemptirq_template+0x269/0x330 [ 485.886434][T14516] ? __x64_sys_sendmsg+0x80/0x80 [ 485.891393][T14516] ? lockdep_hardirqs_on+0x98/0x150 [ 485.896602][T14516] do_syscall_64+0x55/0xb0 [ 485.901019][T14516] ? clear_bhb_loop+0x40/0x90 [ 485.905695][T14516] ? clear_bhb_loop+0x40/0x90 [ 485.910370][T14516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.916269][T14516] RIP: 0033:0x7f0e4379e1d9 [ 485.920684][T14516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.940289][T14516] RSP: 002b:00007f0e44680028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.948706][T14516] RAX: ffffffffffffffda RBX: 00007f0e43a26090 RCX: 00007f0e4379e1d9 [ 485.956677][T14516] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000004 [ 485.964710][T14516] RBP: 00007f0e44680090 R08: 0000000000000000 R09: 0000000000000000 [ 485.972696][T14516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 485.980664][T14516] R13: 00007f0e43a26128 R14: 00007f0e43a26090 R15: 00007ffc17504658 [ 485.988647][T14516] [ 486.208618][T14446] team0: Port device team_slave_0 added [ 486.288812][T14446] team0: Port device team_slave_1 added [ 486.352213][T14446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.361932][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.408849][T14446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.434333][T14446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.456060][T14446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.499328][T14446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.920336][T14446] hsr_slave_0: entered promiscuous mode [ 486.939206][T14446] hsr_slave_1: entered promiscuous mode [ 486.948835][T14446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.962017][T14446] Cannot create hsr debugfs directory [ 487.381528][ T8042] Bluetooth: hci1: command tx timeout [ 488.508776][T14578] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2506'. [ 488.553653][ T42] veth1_macvtap: left promiscuous mode [ 488.559545][ T42] veth1_vlan: left promiscuous mode [ 488.568397][ T42] veth0_vlan: left promiscuous mode [ 489.284611][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.361102][ T42] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 489.461572][ T8042] Bluetooth: hci1: command tx timeout [ 489.549308][ T42] bond0 (unregistering): Released all slaves [ 489.795889][T14446] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.834155][T14446] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.865090][T14446] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 489.908867][T14446] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.079701][T14608] FAULT_INJECTION: forcing a failure. [ 490.079701][T14608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.116334][T14608] CPU: 0 PID: 14608 Comm: syz.0.2509 Not tainted syzkaller #0 [ 490.123943][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 490.134102][T14608] Call Trace: [ 490.137483][T14608] [ 490.140520][T14608] dump_stack_lvl+0x18c/0x250 [ 490.145343][T14608] ? show_regs_print_info+0x20/0x20 [ 490.147035][T14446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.150630][T14608] ? load_image+0x420/0x420 [ 490.161894][T14608] ? __lock_acquire+0x7eb0/0x7eb0 [ 490.167045][T14608] ? snprintf+0xe9/0x140 [ 490.171436][T14608] should_fail_ex+0x394/0x4c0 [ 490.176271][T14608] _copy_to_user+0x2f/0xa0 [ 490.180816][T14608] simple_read_from_buffer+0xe7/0x150 [ 490.186336][T14608] proc_fail_nth_read+0x1e8/0x260 [ 490.187426][T14446] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.191453][T14608] ? proc_fault_inject_write+0x360/0x360 [ 490.191540][T14608] ? fsnotify_perm+0x271/0x5e0 [ 490.191588][T14608] ? proc_fault_inject_write+0x360/0x360 [ 490.191652][T14608] vfs_read+0x298/0x990 [ 490.191744][T14608] ? kernel_read+0x1e0/0x1e0 [ 490.208072][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.208808][T14608] ? __fget_files+0x28/0x460 [ 490.214568][ T8086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.218624][T14608] ? __fget_files+0x3fc/0x460 [ 490.232806][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.234948][T14608] ? __fdget_pos+0x2a3/0x330 [ 490.242212][ T8086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.246769][T14608] ? ksys_read+0x74/0x260 [ 490.270424][T14608] ksys_read+0x151/0x260 [ 490.274815][T14608] ? vfs_write+0x9a0/0x9a0 [ 490.279391][T14608] ? lockdep_hardirqs_on+0x98/0x150 [ 490.284739][T14608] do_syscall_64+0x55/0xb0 [ 490.286314][T14446] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.289208][T14608] ? clear_bhb_loop+0x40/0x90 [ 490.289241][T14608] ? clear_bhb_loop+0x40/0x90 [ 490.300362][T14446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.304279][T14608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.304320][T14608] RIP: 0033:0x7fa53f35ea0e [ 490.304361][T14608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 490.304389][T14608] RSP: 002b:00007fa5401c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 490.358160][T14608] RAX: ffffffffffffffda RBX: 00007fa5401c26c0 RCX: 00007fa53f35ea0e [ 490.366239][T14608] RDX: 000000000000000f RSI: 00007fa5401c20a0 RDI: 0000000000000005 [ 490.374317][T14608] RBP: 00007fa5401c2090 R08: 0000000000000000 R09: 0000000000000000 [ 490.382386][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.390452][T14608] R13: 00007fa53f626038 R14: 00007fa53f625fa0 R15: 00007ffc8d5ca7d8 [ 490.398690][T14608] [ 490.788729][T14446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.966193][T14446] veth0_vlan: entered promiscuous mode [ 491.019584][T14446] veth1_vlan: entered promiscuous mode [ 491.099207][T14446] veth0_macvtap: entered promiscuous mode [ 491.117734][T14446] veth1_macvtap: entered promiscuous mode [ 491.184237][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.202270][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.221763][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.258265][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.283514][T14637] delete_channel: no stack [ 491.298360][T14446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.318591][T14636] netlink: 'syz.0.2515': attribute type 2 has an invalid length. [ 491.345333][T14636] netlink: 'syz.0.2515': attribute type 8 has an invalid length. [ 491.362009][T14636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2515'. [ 491.381733][T14639] netlink: 'syz.1.2514': attribute type 10 has an invalid length. [ 491.541468][ T8042] Bluetooth: hci1: command tx timeout [ 491.554136][T14639] team0: Device gre0 is of different type [ 491.717778][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.738867][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.768678][T14446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.787715][T14446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.819924][T14446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.898920][T14446] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.925922][T14446] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.938435][T14446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.958045][T14446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.029083][T14661] bridge0: entered allmulticast mode [ 492.054775][T14661] veth0_to_bridge: left allmulticast mode [ 492.082240][T14661] veth0_to_bridge: left promiscuous mode [ 492.102773][T14661] bridge0: port 4(veth0_to_bridge) entered disabled state [ 492.144397][T14661] dummy0: left allmulticast mode [ 492.152885][T14661] dummy0: left promiscuous mode [ 492.164232][T14661] bridge0: port 2(dummy0) entered disabled state [ 492.195455][T14661] bridge_slave_0: left promiscuous mode [ 492.201272][T14661] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.352354][ T8086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.369423][ T8086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.452519][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.460396][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.768744][T14702] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.2524'. [ 494.217267][T14711] delete_channel: no stack [ 494.332313][T14722] netlink: 'syz.3.2530': attribute type 9 has an invalid length. [ 494.350333][T14722] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2530'. [ 494.436563][T14722] netlink: 'syz.3.2530': attribute type 9 has an invalid length. [ 494.466012][T14722] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2530'. [ 494.706651][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 494.717878][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 494.732142][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 494.741058][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 494.749808][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 494.757625][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 494.837408][ T8086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.923034][ T8086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.994949][ T8086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.079790][ T8086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.226990][T14737] chnl_net:caif_netlink_parms(): no params data found [ 495.265581][T14749] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.2532'. [ 496.109533][T14737] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.133219][T14737] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.142303][T14737] bridge_slave_0: entered allmulticast mode [ 496.151089][T14737] bridge_slave_0: entered promiscuous mode [ 496.312300][T14737] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.323059][T14737] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.330295][T14737] bridge_slave_1: entered allmulticast mode [ 496.347256][T14737] bridge_slave_1: entered promiscuous mode [ 496.623455][T14788] syz.2.2539[14788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.623687][T14788] syz.2.2539[14788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.668688][T14737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.730385][T14737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.761743][T14787] netlink: 'syz.3.2540': attribute type 4 has an invalid length. [ 496.822367][ T8042] Bluetooth: hci0: command tx timeout [ 496.923857][T14737] team0: Port device team_slave_0 added [ 496.942095][T14737] team0: Port device team_slave_1 added [ 497.102921][T14737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.110646][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.137510][T14737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.154988][T14737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.165407][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.193793][T14737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.303816][T14737] hsr_slave_0: entered promiscuous mode [ 497.316943][T14737] hsr_slave_1: entered promiscuous mode [ 497.329602][T14737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.340905][T14737] Cannot create hsr debugfs directory [ 498.140735][ T8086] veth1_vlan: left promiscuous mode [ 498.149112][ T8086] veth0_vlan: left promiscuous mode [ 498.901543][ T8042] Bluetooth: hci0: command tx timeout [ 498.920947][ T8086]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.173191][ T8086]  (unregistering): Released all slaves [ 499.690296][T14871] netlink: 'syz.1.2556': attribute type 9 has an invalid length. [ 499.810032][T14871] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2556'. [ 500.268854][T14887] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2560'. [ 500.287000][T14887] bond0: (slave bond_slave_0): Releasing backup interface [ 500.288609][T14872] netlink: 'syz.1.2556': attribute type 9 has an invalid length. [ 500.313882][T14887] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 500.356522][T14872] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2556'. [ 500.791451][T14885] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2560'. [ 500.942978][T14737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.961618][T14737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.981796][ T8042] Bluetooth: hci0: command tx timeout [ 501.006122][T14737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 501.044226][T14737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 501.595700][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.602185][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.798855][T14737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.917493][T14737] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.068152][T14269] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.075349][T14269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.119485][T14269] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.126672][T14269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.985555][T14737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.064534][ T8042] Bluetooth: hci0: command tx timeout [ 503.161613][T14737] veth0_vlan: entered promiscuous mode [ 503.224959][T14737] veth1_vlan: entered promiscuous mode [ 503.293768][T14737] veth0_macvtap: entered promiscuous mode [ 503.335350][T14737] veth1_macvtap: entered promiscuous mode [ 503.377512][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.412640][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.437705][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.451219][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.476219][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.498104][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.510929][T14737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.529534][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.548978][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.559435][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.576564][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.587384][T14737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.598289][T14737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.612921][T14737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.629626][T14737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.638803][T14737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.649059][T14737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.658573][T14737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.745677][T14266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.755842][T14266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.801234][T14266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.814467][T14266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.047135][T14974] netlink: 'syz.3.2575': attribute type 21 has an invalid length. [ 504.068570][T14974] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2575'. [ 504.250536][T14978] syzkaller0: entered promiscuous mode [ 504.262764][T14978] syzkaller0: entered allmulticast mode [ 504.584223][T14989] netlink: 'syz.2.2581': attribute type 4 has an invalid length. [ 504.592816][T14989] netlink: 'syz.2.2581': attribute type 16 has an invalid length. [ 504.602959][T14989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2581'. [ 507.189915][T15025] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.2592'. [ 507.203203][T15025] openvswitch: netlink: IP tunnel dst address not specified [ 507.537759][T15039] syzkaller0: entered promiscuous mode [ 507.544617][T15039] syzkaller0: entered allmulticast mode [ 507.599993][T15047] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.614615][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.640961][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.650906][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.660992][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.673774][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.687985][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.700853][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 507.712839][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'. [ 508.745255][T15088] netlink: 'syz.1.2609': attribute type 10 has an invalid length. [ 508.923186][T15092] netlink: 'syz.3.2610': attribute type 21 has an invalid length. [ 508.966297][T15092] netlink: 'syz.3.2610': attribute type 4 has an invalid length. [ 509.395385][T15110] netlink: 'syz.0.2616': attribute type 3 has an invalid length. [ 510.987901][T15146] syzkaller0: entered promiscuous mode [ 511.001277][T15146] syzkaller0: entered allmulticast mode [ 513.862720][T15178] netlink: 'syz.3.2633': attribute type 29 has an invalid length. [ 513.944289][T15183] __nla_validate_parse: 31 callbacks suppressed [ 513.944306][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 513.988278][T15178] netlink: 'syz.3.2633': attribute type 29 has an invalid length. [ 514.017774][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.041696][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.058089][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.068162][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.077736][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.095067][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.104551][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.114119][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.129198][T15183] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2633'. [ 514.688300][T15209] netlink: 'syz.1.2643': attribute type 21 has an invalid length. [ 518.095912][T15316] : renamed from bond0 (while UP) [ 518.599683][T15331] netlink: 'syz.0.2681': attribute type 6 has an invalid length. [ 519.285162][T15355] __nla_validate_parse: 58 callbacks suppressed [ 519.285182][T15355] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2690'. [ 520.800807][T15402] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2704'. [ 523.328835][T15443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2719'. [ 523.427225][T15443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2719'. [ 523.481633][T15444] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2719'. [ 524.372043][T15465] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2726'. [ 524.386700][T15469] netlink: 'syz.0.2727': attribute type 33 has an invalid length. [ 524.401162][T15469] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2727'. [ 524.484495][T15470] netlink: 'syz.0.2727': attribute type 153 has an invalid length. [ 524.528486][T15470] netlink: 'syz.0.2727': attribute type 1 has an invalid length. [ 524.536588][T15470] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.2727'. [ 524.611116][T15477] netlink: 'syz.1.2730': attribute type 27 has an invalid length. [ 524.663070][T15477] netlink: 'syz.1.2730': attribute type 3 has an invalid length. [ 524.675811][T15477] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2730'. [ 527.105624][T15533] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 527.119505][T15533] netlink: 'syz.3.2746': attribute type 2 has an invalid length. [ 527.175905][T15533] netlink: 'syz.3.2746': attribute type 2 has an invalid length. [ 527.189911][T15533] netlink: 'syz.3.2746': attribute type 3 has an invalid length. [ 527.201712][T15533] netlink: 'syz.3.2746': attribute type 4 has an invalid length. [ 527.211546][T15533] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.2746'. [ 527.413645][T15555] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2753'. [ 528.760033][T15582] nla_validate_range_unsigned: 25 callbacks suppressed [ 528.760047][T15582] netlink: 'syz.0.2764': attribute type 11 has an invalid length. [ 528.785868][T15582] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2764'. [ 529.407543][T15609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.417899][T15609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.428795][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.438567][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.448110][T15618] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.457762][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.467510][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.490218][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.499840][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 529.519684][T15608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2771'. [ 530.314389][T15656] validate_nla: 9 callbacks suppressed [ 530.314424][T15656] netlink: 'syz.0.2787': attribute type 1 has an invalid length. [ 530.329736][T15656] netlink: 'syz.0.2787': attribute type 3 has an invalid length. [ 530.340311][T15654] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 530.353660][T15653] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 530.444337][T15658] netlink: 'syz.0.2788': attribute type 6 has an invalid length. [ 530.453292][T15658] netlink: 'syz.0.2788': attribute type 3 has an invalid length. [ 534.179100][T15717] netlink: 'syz.2.2807': attribute type 10 has an invalid length. [ 534.557226][T15728] netlink: 'syz.1.2810': attribute type 3 has an invalid length. [ 534.565705][T15728] netlink: 'syz.1.2810': attribute type 6 has an invalid length. [ 534.574070][T15728] __nla_validate_parse: 21 callbacks suppressed [ 534.574084][T15728] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.2810'. [ 535.619011][T15769] netlink: 'syz.1.2826': attribute type 10 has an invalid length. [ 535.921840][T15778] netlink: 'syz.2.2830': attribute type 2 has an invalid length. [ 535.948865][T15778] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2830'. [ 541.792012][T15805] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2838'. [ 542.306558][T15821] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2843'. [ 542.348418][T15823] netlink: 'syz.2.2844': attribute type 63 has an invalid length. [ 542.356086][T15821] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2843'. [ 542.358152][T15823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2844'. [ 542.366947][T15821] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2843'. [ 542.384944][T15823] netlink: 'syz.2.2844': attribute type 21 has an invalid length. [ 542.384971][T15823] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2844'. [ 542.620602][T15832] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2847'. [ 545.307557][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'. [ 545.320133][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2850'. [ 545.331388][T15843] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2850'. [ 545.341306][T15845] netlink: 'syz.3.2850': attribute type 10 has an invalid length. [ 545.356679][T15845] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.367777][T15845] bridge_slave_1: left allmulticast mode [ 545.376765][T15845] bridge_slave_1: left promiscuous mode [ 545.382726][T15845] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.393855][T15845] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 546.296646][T15942] netlink: 'syz.0.2872': attribute type 29 has an invalid length. [ 546.310760][T15942] netlink: 'syz.0.2872': attribute type 29 has an invalid length. [ 547.862410][T15974] netlink: 'syz.2.2883': attribute type 5 has an invalid length. [ 548.723351][T15981] syzkaller0: entered promiscuous mode [ 548.729292][T15981] syzkaller0: entered allmulticast mode [ 549.207188][T15995] netlink: 'syz.1.2888': attribute type 3 has an invalid length. [ 549.214555][T15989] __nla_validate_parse: 2 callbacks suppressed [ 549.214570][T15989] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2886'. [ 549.242254][T15995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2888'. [ 551.204899][T16048] netlink: 'syz.2.2904': attribute type 12 has an invalid length. [ 551.240678][T16048] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2904'. [ 551.675990][T16068] netlink: 'syz.3.2909': attribute type 21 has an invalid length. [ 551.693005][T16068] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2909'. [ 561.890670][T16260] netlink: 'syz.1.2958': attribute type 10 has an invalid length. [ 561.908627][T16260] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2958'. [ 561.929584][T16260] ipvlan1: entered promiscuous mode [ 561.936784][T16260] ipvlan1: entered allmulticast mode [ 561.945591][T16260] veth0_vlan: entered allmulticast mode [ 561.978849][T16260] bridge0: port 3(ipvlan1) entered blocking state [ 561.992127][T16260] bridge0: port 3(ipvlan1) entered disabled state [ 562.069534][T16260] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 562.090780][T16265] netlink: 'syz.1.2958': attribute type 10 has an invalid length. [ 562.099950][T16265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2958'. [ 562.114901][T16265] bridge0: port 3(ipvlan1) entered blocking state [ 562.123230][T16265] bridge0: port 3(ipvlan1) entered disabled state [ 562.134279][T16265] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 562.226016][T16272] syzkaller0: entered promiscuous mode [ 562.243231][T16272] syzkaller0: entered allmulticast mode [ 562.265517][T16272] netlink: 'syz.0.2962': attribute type 9 has an invalid length. [ 562.274286][T16272] netlink: 387 bytes leftover after parsing attributes in process `syz.0.2962'. [ 562.986699][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.994577][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.289452][T16318] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2980'. [ 568.239139][T16375] netlink: 'syz.2.2995': attribute type 4 has an invalid length. [ 568.387795][T16387] netlink: 'syz.0.2996': attribute type 10 has an invalid length. [ 568.471784][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.512948][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.534054][T16392] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2999'. [ 568.557251][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.579085][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.608417][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.641535][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.649528][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.657760][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.665792][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.674156][T16387] netlink: 'syz.0.2996': attribute type 11 has an invalid length. [ 568.686783][T16387] netlink: 'syz.0.2996': attribute type 4 has an invalid length. [ 568.695134][T16387] netlink: 'syz.0.2996': attribute type 5 has an invalid length. [ 568.721485][T16387] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.2996'. [ 569.030138][T16377] delete_channel: no stack [ 570.034493][T16443] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3018'. [ 570.068311][T16443] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.3018'. [ 570.142085][T16446] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3019'. [ 570.156624][T16446] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.3019'. [ 570.184557][T16376] Bluetooth: hci4: command 0x0406 tx timeout [ 570.620964][T16461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3024'. [ 571.026457][T16471] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3026'. [ 571.046939][T16471] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 571.453164][T16491] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3030'. [ 571.485208][T16491] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.3030'. [ 573.614362][T16539] __nla_validate_parse: 1 callbacks suppressed [ 573.614379][T16539] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3049'. [ 574.709939][T16566] netlink: 'syz.2.3059': attribute type 16 has an invalid length. [ 574.720319][T16566] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3059'. [ 574.807000][T16575] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3060'. [ 575.705639][T16600] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3070'. [ 582.968860][T16748] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3121'. [ 583.236747][T16761] netlink: 'syz.1.3125': attribute type 21 has an invalid length. [ 584.402568][T16781] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3133'. [ 585.266074][T16810] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3145'. [ 586.243027][T16836] netlink: 'syz.2.3154': attribute type 10 has an invalid length. [ 586.259273][T16836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3154'. [ 586.278221][T16836] batman_adv: batadv0: Adding interface: veth0_vlan [ 586.285319][T16836] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.343741][T16836] batman_adv: batadv0: Interface activated: veth0_vlan [ 586.407265][T16839] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3156'. [ 587.703305][T16858] batadv0: entered promiscuous mode [ 588.523247][T16880] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3167'. [ 588.722819][T16891] netlink: 153156 bytes leftover after parsing attributes in process `syz.2.3173'. [ 588.779408][T16891] openvswitch: netlink: Flow key attr not present in new flow. [ 588.915188][T16893] netlink: 'syz.0.3171': attribute type 10 has an invalid length. [ 588.938371][T16893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3171'. [ 588.988847][T16893] batman_adv: batadv0: Adding interface: veth0_vlan [ 589.000002][T16893] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.059605][T16893] batman_adv: batadv0: Interface activated: veth0_vlan [ 590.065435][T16932] netlink: 'syz.3.3189': attribute type 10 has an invalid length. [ 590.074139][T16932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3189'. [ 590.128175][T16932] batman_adv: batadv0: Adding interface: veth0_vlan [ 590.161684][T16932] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.222307][T16932] batman_adv: batadv0: Interface activated: veth0_vlan [ 590.353682][T16941] netlink: 'syz.2.3193': attribute type 10 has an invalid length. [ 590.407399][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.417274][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.635388][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.644142][T16941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.654927][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.663038][T16941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.816563][T16941] team0: Port device bridge0 added [ 591.728388][T16981] netlink: 'syz.1.3208': attribute type 10 has an invalid length. [ 591.750353][T16981] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.760185][T16981] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.941593][T16981] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.953100][T16981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.971273][T16981] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.981875][T16981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.399028][T16981] team0: Port device bridge0 added [ 593.080710][T16999] netlink: 'syz.2.3218': attribute type 3 has an invalid length. [ 593.090305][T16999] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 593.106179][T16999] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3218'. [ 593.437934][T17011] netlink: 'syz.3.3223': attribute type 10 has an invalid length. [ 593.459369][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.518899][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.526458][T17011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.793074][T17011] team0: Port device bridge0 added [ 593.858662][T17011] syz.3.3223 (17011) used greatest stack depth: 17544 bytes left [ 594.567301][T17044] netlink: 'syz.3.3236': attribute type 10 has an invalid length. [ 594.646232][T17044] team0: Port device wlan1 added [ 595.495820][T17073] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3247'. [ 595.516474][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 595.551198][T17075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3247'. [ 595.569328][T17075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3247'. [ 595.589416][T17071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3247'. [ 595.609710][T17072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3247'. [ 595.783424][T16376] Bluetooth: hci2: command 0x0406 tx timeout [ 597.415170][T17121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3265'. [ 597.434726][T17121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3265'. [ 597.588108][T17125] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3266'. [ 597.647517][T17129] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3266'. [ 600.550938][T17217] __nla_validate_parse: 5 callbacks suppressed [ 600.550974][T17217] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3295'. [ 600.580891][T17217] hsr_slave_0: left promiscuous mode [ 600.595394][T17217] hsr_slave_1: left promiscuous mode [ 602.496355][T17246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 602.510382][T17246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3303'. [ 603.073070][T17261] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3310'. [ 603.173712][T17261] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3310'. [ 603.505571][T17261] hsr_slave_0: left promiscuous mode [ 603.532658][T17261] hsr_slave_1: left promiscuous mode [ 605.641670][T17309] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3328'. [ 605.753360][T17309] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3328'. [ 605.776858][T17309] hsr_slave_0: left promiscuous mode [ 605.802092][T17309] hsr_slave_1: left promiscuous mode [ 606.022086][ T8042] Bluetooth: hci1: command 0x0406 tx timeout [ 606.662740][T17340] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3341'. [ 608.238938][T17370] netlink: 'syz.1.3349': attribute type 19 has an invalid length. [ 608.248768][T17370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3349'. [ 608.566889][T17380] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3354'. [ 608.585723][T17380] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3354'. [ 609.529992][T17403] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3364'. [ 609.643221][T17403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3364'. [ 609.926518][T17417] FAULT_INJECTION: forcing a failure. [ 609.926518][T17417] name failslab, interval 1, probability 0, space 0, times 0 [ 609.945491][T17417] CPU: 1 PID: 17417 Comm: syz.3.3369 Not tainted syzkaller #0 [ 609.952999][T17417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 609.963320][T17417] Call Trace: [ 609.966601][T17417] [ 609.969537][T17417] dump_stack_lvl+0x18c/0x250 [ 609.974233][T17417] ? show_regs_print_info+0x20/0x20 [ 609.979438][T17417] ? load_image+0x420/0x420 [ 609.983956][T17417] ? __lock_acquire+0x7eb0/0x7eb0 [ 609.988984][T17417] ? __mutex_trylock_common+0x160/0x270 [ 609.994550][T17417] should_fail_ex+0x394/0x4c0 [ 609.999257][T17417] should_failslab+0x9/0x20 [ 610.003770][T17417] slab_pre_alloc_hook+0x59/0x300 [ 610.008799][T17417] ? __mutex_lock+0x30d/0xc80 [ 610.013488][T17417] ? bpf_trampoline_update+0x79/0x11c0 [ 610.018951][T17417] __kmem_cache_alloc_node+0x53/0x250 [ 610.024338][T17417] ? bpf_trampoline_update+0x79/0x11c0 [ 610.029810][T17417] kmalloc_trace+0x2a/0xe0 [ 610.034241][T17417] bpf_trampoline_update+0x79/0x11c0 [ 610.039533][T17417] ? __local_bh_enable_ip+0x13a/0x1c0 [ 610.044924][T17417] bpf_trampoline_unlink_prog+0x2ab/0x330 [ 610.050664][T17417] bpf_tracing_link_release+0x4a/0xe0 [ 610.056066][T17417] bpf_link_free+0x123/0x300 [ 610.060663][T17417] ? idr_preload_end+0x200/0x200 [ 610.065605][T17417] bpf_link_release+0x6e/0x80 [ 610.070287][T17417] __fput+0x221/0x940 [ 610.074296][T17417] __se_sys_close+0x15c/0x1e0 [ 610.078989][T17417] do_syscall_64+0x55/0xb0 [ 610.083408][T17417] ? clear_bhb_loop+0x40/0x90 [ 610.088086][T17417] ? clear_bhb_loop+0x40/0x90 [ 610.092774][T17417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.098682][T17417] RIP: 0033:0x7f0e4379e1d9 [ 610.103101][T17417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.122709][T17417] RSP: 002b:00007f0e446a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 610.131128][T17417] RAX: ffffffffffffffda RBX: 00007f0e43a25fa0 RCX: 00007f0e4379e1d9 [ 610.139103][T17417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.147077][T17417] RBP: 00007f0e446a1090 R08: 0000000000000000 R09: 0000000000000000 [ 610.155052][T17417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.163460][T17417] R13: 00007f0e43a26038 R14: 00007f0e43a25fa0 R15: 00007ffc17504658 [ 610.171458][T17417] [ 610.179412][T17417] ------------[ cut here ]------------ [ 610.185230][T17417] WARNING: CPU: 0 PID: 17417 at kernel/bpf/syscall.c:3128 bpf_tracing_link_release+0xc6/0xe0 [ 610.195616][T17417] Modules linked in: [ 610.199542][T17417] CPU: 0 PID: 17417 Comm: syz.3.3369 Not tainted syzkaller #0 [ 610.207094][T17417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 610.217244][T17417] RIP: 0010:bpf_tracing_link_release+0xc6/0xe0 [ 610.223470][T17417] Code: 74 15 e8 cd ea ef ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 3d a1 fe ff e8 b8 ea ef ff 5b 41 5c 41 5e 41 5f 5d c3 e8 aa ea ef ff <0f> 0b 43 80 3c 3c 00 75 96 eb 9c 66 2e 0f 1f 84 00 00 00 00 00 0f [ 610.243168][T17417] RSP: 0018:ffffc900057ffdc8 EFLAGS: 00010293 [ 610.249245][T17417] RAX: ffffffff8197a606 RBX: ffff88814d9ef600 RCX: ffff88807d69da00 [ 610.257310][T17417] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 610.265496][T17417] RBP: 00000000fffffff4 R08: ffffc900057ffd07 R09: 1ffff92000afffa0 [ 610.273545][T17417] R10: dffffc0000000000 R11: fffff52000afffa1 R12: 1ffff11029b3ded1 [ 610.282402][T17417] R13: ffff88805ec430fd R14: ffff88814d9ef688 R15: dffffc0000000000 [ 610.290420][T17417] FS: 00007f0e446a16c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 610.299525][T17417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.306202][T17417] CR2: 000000110c38fede CR3: 0000000068d8b000 CR4: 00000000003506f0 [ 610.314286][T17417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.322353][T17417] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 610.330357][T17417] Call Trace: [ 610.333704][T17417] [ 610.336670][T17417] bpf_link_free+0x123/0x300 [ 610.341347][T17417] ? idr_preload_end+0x200/0x200 [ 610.346328][T17417] bpf_link_release+0x6e/0x80 [ 610.351038][T17417] __fput+0x221/0x940 [ 610.355411][T17417] __se_sys_close+0x15c/0x1e0 [ 610.360140][T17417] do_syscall_64+0x55/0xb0 [ 610.364645][T17417] ? clear_bhb_loop+0x40/0x90 [ 610.369358][T17417] ? clear_bhb_loop+0x40/0x90 [ 610.374148][T17417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.380822][T17417] RIP: 0033:0x7f0e4379e1d9 [ 610.385406][T17417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.405087][T17417] RSP: 002b:00007f0e446a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 610.413604][T17417] RAX: ffffffffffffffda RBX: 00007f0e43a25fa0 RCX: 00007f0e4379e1d9 [ 610.421736][T17417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.429725][T17417] RBP: 00007f0e446a1090 R08: 0000000000000000 R09: 0000000000000000 [ 610.437785][T17417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.445827][T17417] R13: 00007f0e43a26038 R14: 00007f0e43a25fa0 R15: 00007ffc17504658 [ 610.453931][T17417] [ 610.456984][T17417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 610.464613][T17417] CPU: 0 PID: 17417 Comm: syz.3.3369 Not tainted syzkaller #0 [ 610.472073][T17417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 610.482137][T17417] Call Trace: [ 610.485410][T17417] [ 610.488339][T17417] dump_stack_lvl+0x18c/0x250 [ 610.493033][T17417] ? show_regs_print_info+0x20/0x20 [ 610.498246][T17417] ? load_image+0x420/0x420 [ 610.502769][T17417] panic+0x2ca/0x720 [ 610.506668][T17417] ? bpf_jit_dump+0xd0/0xd0 [ 610.511184][T17417] __warn+0x2e0/0x470 [ 610.515174][T17417] ? bpf_tracing_link_release+0xc6/0xe0 [ 610.520738][T17417] ? bpf_tracing_link_release+0xc6/0xe0 [ 610.526296][T17417] report_bug+0x2be/0x4f0 [ 610.530652][T17417] ? bpf_tracing_link_release+0xc6/0xe0 [ 610.536205][T17417] ? bpf_tracing_link_release+0xc6/0xe0 [ 610.541781][T17417] ? bpf_tracing_link_release+0xc8/0xe0 [ 610.547358][T17417] handle_bug+0xcf/0x120 [ 610.551615][T17417] exc_invalid_op+0x1a/0x50 [ 610.556139][T17417] asm_exc_invalid_op+0x1a/0x20 [ 610.561174][T17417] RIP: 0010:bpf_tracing_link_release+0xc6/0xe0 [ 610.567362][T17417] Code: 74 15 e8 cd ea ef ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 3d a1 fe ff e8 b8 ea ef ff 5b 41 5c 41 5e 41 5f 5d c3 e8 aa ea ef ff <0f> 0b 43 80 3c 3c 00 75 96 eb 9c 66 2e 0f 1f 84 00 00 00 00 00 0f [ 610.586969][T17417] RSP: 0018:ffffc900057ffdc8 EFLAGS: 00010293 [ 610.593045][T17417] RAX: ffffffff8197a606 RBX: ffff88814d9ef600 RCX: ffff88807d69da00 [ 610.601029][T17417] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 610.609005][T17417] RBP: 00000000fffffff4 R08: ffffc900057ffd07 R09: 1ffff92000afffa0 [ 610.616980][T17417] R10: dffffc0000000000 R11: fffff52000afffa1 R12: 1ffff11029b3ded1 [ 610.624949][T17417] R13: ffff88805ec430fd R14: ffff88814d9ef688 R15: dffffc0000000000 [ 610.632932][T17417] ? bpf_tracing_link_release+0xc6/0xe0 [ 610.638501][T17417] ? bpf_tracing_link_release+0xc6/0xe0 [ 610.644049][T17417] bpf_link_free+0x123/0x300 [ 610.648644][T17417] ? idr_preload_end+0x200/0x200 [ 610.653580][T17417] bpf_link_release+0x6e/0x80 [ 610.658260][T17417] __fput+0x221/0x940 [ 610.662265][T17417] __se_sys_close+0x15c/0x1e0 [ 610.666948][T17417] do_syscall_64+0x55/0xb0 [ 610.671365][T17417] ? clear_bhb_loop+0x40/0x90 [ 610.676039][T17417] ? clear_bhb_loop+0x40/0x90 [ 610.680713][T17417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.686616][T17417] RIP: 0033:0x7f0e4379e1d9 [ 610.691033][T17417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.710637][T17417] RSP: 002b:00007f0e446a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 610.719054][T17417] RAX: ffffffffffffffda RBX: 00007f0e43a25fa0 RCX: 00007f0e4379e1d9 [ 610.727022][T17417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.734991][T17417] RBP: 00007f0e446a1090 R08: 0000000000000000 R09: 0000000000000000 [ 610.742958][T17417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.750925][T17417] R13: 00007f0e43a26038 R14: 00007f0e43a25fa0 R15: 00007ffc17504658 [ 610.758919][T17417] [ 610.762080][T17417] Kernel Offset: disabled [ 610.766398][T17417] Rebooting in 86400 seconds..