last executing test programs: 5.59948483s ago: executing program 0 (id=7211): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x8000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}, {0x0, 0x2f}], 0x2}, 0x400c000) 5.283842418s ago: executing program 0 (id=7225): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x4000004, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1004, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d00010002", 0x25}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfe33) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x3}, 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0x101d0) 5.013623124s ago: executing program 1 (id=7217): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x7, &(0x7f00000001c0)=[{0xb, 0x3, 0x1, 0x9}, {0x7ff, 0x24, 0x3, 0x8}, {0x1, 0xaf, 0x2, 0x7}, {0x8, 0x1, 0x6, 0x80000000}, {0x5, 0x1, 0x0, 0x8}, {0x1, 0xf5, 0xe}, {0x80, 0x3, 0xd8}]}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x88, 0x0, 0x0) (async) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x3000000c, @loopback={0xffffffffffffff91}, 0x3}, 0x80, 0x0}, 0x2000c805) 4.690962431s ago: executing program 3 (id=7219): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x8810) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42482, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x1, 0x0, 0x13, 0x4, 0x0, 0xef, 0x13dded, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x109901, 0x20000001, 0x6, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffbfe}, 0x0, 0xfeffffffffffffff, r4, 0x9) socketpair(0x10, 0xa, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000008c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x4, &(0x7f0000000880)}, 0x10001) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x6) getpid() ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000300)={0x0, 0x80, 0x16, 0xfc, 0x4, 0xf8, 0x0, 0x2, 0x520, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6ab4, 0x1, @perf_config_ext={0x9, 0x4}, 0x1001, 0x9, 0x2, 0x2, 0xe, 0xfffffff0, 0x3, 0x0, 0x1, 0x0, 0x7fffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000770000007f8000000000621e66b7628933bdd3b86c5dc860fd82576059606ac1ad50ad3a9b00525c5b89475d1c80b066b47e5a5485eff8d45424b4a17d83a09651fc7d075ba2638314160486dca4ac07115848c5b67d57f75202a37214d7b17c99123fc03703d2f0192316c24c2486b9855e573ad8d50d4b4191a97c46eb72c9cc5af4e71fba169720fde34fc31aa48e27d6bcdc7c99cc"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcdcffff00000000000000000000000700000000b2e1f64ab604007922c0a1d6a7d97c6f7b683fb97ff70000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ed000061fb3e2ddf33c9c8b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)=r9}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r9, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) 4.525871525s ago: executing program 2 (id=7221): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700", 0x2c}], 0x1}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003567d25a806f8c6394f96724fc60", 0x14}], 0x1}, 0x0) (async) perf_event_open$cgroup(0x0, r0, 0xc, 0xffffffffffffffff, 0x5) close(r3) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22ffe7) (async) ioctl$TUNGETVNETLE(r3, 0xc008744c, &(0x7f0000000180)) 4.372059889s ago: executing program 0 (id=7222): r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x208, 0x1, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r9}, &(0x7f0000000440), &(0x7f0000000480)=r10}, 0x20) sendmsg$inet(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8916, &(0x7f0000000980)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xbd\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="14eb078b98dad8aac249498e6d", 0xd}], 0x1}, 0x8810) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x28, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42482, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r8], 0x12) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x1, 0x0, 0x13, 0x4, 0x0, 0xef, 0x13dded, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x109901, 0x20000001, 0x6, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffbfe}, 0x0, 0xfeffffffffffffff, r9, 0x9) socketpair(0x10, 0xa, 0x9, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f00000008c0)={&(0x7f0000000240), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x4, &(0x7f0000000880)}, 0x10001) 3.907403859s ago: executing program 4 (id=7228): r0 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="1400000036000b63717a3c4a0e1e02f30ccefc77", 0x14}], 0x1}, 0x40000) 3.821522441s ago: executing program 1 (id=7229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x288001, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0xcb8}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r3 = socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002500)={&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000024c0)=[{&(0x7f00000014c0)="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", 0x1000}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x3, 0x0, 0x0, 0xc}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x1, 0x4, 0x0, 0x20, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.711076464s ago: executing program 2 (id=7230): r0 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) (async, rerun: 32) close(0x3) (rerun: 32) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(0x3) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (rerun: 32) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c) recvmsg$unix(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000), 0x1c) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="04000000010000000100"/28], 0x50) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x8, 0x8000000000ca, 0x0, 0x3, 0x0, 0x10, 0x6, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) (async) close(0xffffffffffffffff) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.654640485s ago: executing program 3 (id=7231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010410000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000008500000008000000b70000000000000095fffffff9000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.653940665s ago: executing program 4 (id=7232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000e4ffffff06fffffffa"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.489515489s ago: executing program 3 (id=7233): r0 = socket$kcm(0x10, 0x2, 0x10) (async) close(0x3) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) (async) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2002) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x94) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x3ff, 0x0}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x16, 0x1, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r4, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@ifindex=r8, r5, 0x2b, 0x12, r5, @void, @value=r5, @void, @void, r7}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r6, 0x4) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x30}, 0x0) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x3e8, 0xf, 0x0, &(0x7f0000000100)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xd, 0xf6, 0x3, 0x1, 0x0, 0x1, 0x20021, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ff, 0x9}, 0x200, 0x7, 0x1, 0x5, 0x5, 0x10000, 0x401, 0x0, 0x9}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r9, 0x4) 3.488203469s ago: executing program 1 (id=7234): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000a000000850000007000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0x2425, 0x2, 0x51, 0x0, 0x0, 0xd8d9, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES16=r3, @ANYBLOB="a0fb1bcf516a54e898fb96d21000000000000000000000000100", @ANYRES32=0x0, @ANYBLOB], 0x50) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x47, 0x0, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40), 0x1, 0x0, 0x13}, 0x50) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8}, {0x0, 0x0, 0xfe, 0x3ff}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) 3.46080444s ago: executing program 4 (id=7235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="181a000000000000000000000000000085000000750000001801000020648b2500000000002005007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70d27d3cf26cf6bcb4313000000000000cacf10fb0e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x9, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070040850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0xffb7b6a8cc007409, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x22, 0x7, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107983, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0xfd, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100778, 0x0, 0x4000, 0x0, 0x7, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRES32=r7, @ANYRES32=r13, @ANYRES64=r9, @ANYRES32=r12, @ANYRESDEC=0x0], 0x50) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f00000002c0)=ANY=[@ANYRES8=r6, @ANYRES8=r14], 0x12) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYRESDEC=r8, @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800ff00b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp=0x25, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r16, 0x2000012, 0xe, 0x0, &(0x7f00000000c0)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) r17 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r17, &(0x7f0000000380)={&(0x7f0000000000)=@phonet={0x23, 0x8, 0x0, 0x7}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}, 0x40c1) 3.44168485s ago: executing program 0 (id=7236): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x8044) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0xfffffffffffffd9a, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x129) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x129) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x30, 0x4a, 0x4, 0xfffff038}, {0x6, 0x0, 0xff, 0xf02}]}) 3.249358135s ago: executing program 3 (id=7237): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{0x2, 0x5, 0x8, 0xc}], 0x10, 0x7}, 0x94) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="330000000220", @ANYRES32=r2, @ANYRES32=r3], 0x20) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffffffffffc0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1, 0x0, 0x4, 0x58b}, {0x4, 0x3, 0x3, 0x1}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 3.203646106s ago: executing program 2 (id=7238): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001a00000000009fd1"], &(0x7f0000000040)=""/132, 0x1a, 0x84, 0x1}, 0x28) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7d, &(0x7f0000000000)=r3, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xffc0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x2, 0x7, 0x9, 0x3002, 0x1, 0x4, '\x00', 0x0, r0, 0x2, 0x2, 0x5, 0xd}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0x1, 0x58, &(0x7f0000001500)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002640)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func={0x9, 0x0, 0x0, 0xc, 0x4}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x10]}}, &(0x7f0000001640)=""/4096, 0x47, 0x1000, 0x1, 0x10001}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x12, 0x16, &(0x7f00000026c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0xff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa9b}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000002780)='syzkaller\x00', 0xff, 0x90, &(0x7f00000027c0)=""/144, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1a, r0, 0x8, &(0x7f0000002880)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000028c0)={0x3, 0x3, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000002900)=[0x1, 0xffffffffffffffff], &(0x7f0000002940)=[{0x4, 0x1, 0xc, 0x1}, {0x2, 0x5, 0x4, 0xd}, {0x0, 0x3, 0xf, 0x3}, {0x2, 0x4, 0x8, 0xf}, {0x5, 0x3, 0xfffffffe, 0x5}, {0x0, 0x3, 0x10, 0x8}, {0x4, 0x4, 0xa, 0x1}, {0x1, 0x3, 0xf, 0x6}], 0x10, 0x5f5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r7, @ANYRES8=r9], 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a80)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r11, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r12, r10, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x3, 0x4, 0x1}, 0x50) 3.160030976s ago: executing program 0 (id=7239): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x4f01, 0x0, 0xc2ba, 0x6, 0x4000000, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002280)={0xffffffffffffffff, &(0x7f0000001200), 0x0}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008a1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) (async) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000002280)="00f1aef59e1ec05ab201a5859511", 0x0, 0x1000009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$kcm(0x21, 0x2, 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1081c2, 0x6, 0x800, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2000000000000000840000e978b85575b7d90de0000000009200100000008100"], 0x20}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r3, 0x110, 0x3, 0x0, 0x0) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f"], 0xcfa4) 2.933374032s ago: executing program 4 (id=7240): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0xffffceb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x2}, 0x80, 0x0}, 0xe07e872400dfa7ca) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x48000) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/219, 0xdb, 0x0, &(0x7f00000001c0)=""/172, 0xac}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r7, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0xffffceb0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x2}, 0x80, 0x0}, 0xe07e872400dfa7ca) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x48000) (async) socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xe, 0x5}, {0x2}]}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x20) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/219, 0xdb, 0x0, &(0x7f00000001c0)=""/172, 0xac}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r7, 0x4) (async) 2.721746947s ago: executing program 1 (id=7241): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r5 = socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000f200000000"], 0x18}, 0x440c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x3}, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000840)=""/4088, 0x1001}, {&(0x7f0000004700)=""/4058, 0xfffffff6}, {&(0x7f0000005700)=""/4135, 0x1027}, {0x0}], 0x4}, 0x10100) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) getpid() (async) write$cgroup_pid(r3, &(0x7f0000000080)=r4, 0x12) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) (async) socket$kcm(0x21, 0x2, 0xa) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000002c0)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f\xe8\xf4\xa8\\`0\x15[W\xd6\x95\f\x84\xe94]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nI\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f') (async) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000f200000000"], 0x18}, 0x440c0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 1.923772605s ago: executing program 4 (id=7242): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0xd6) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)}, 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/9, 0x9}, 0x40000010) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4018, 0x9, 0xc2ba, 0x0, 0x3ffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="f7ffcc201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000005400000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x42}}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) 1.827956388s ago: executing program 2 (id=7243): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6tnl0\x00', @broadcast}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2f86, 0x7}, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x0, 0x6, 0xf60, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&') syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES8=r5], 0x9a) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000200)={0x0, 0x7, [@random="40cc13df6db9", @random="123c0477078a", @link_local, @multicast, @broadcast, @random="15dfc3fd289f", @multicast]}) close(r3) ioctl$TUNGETVNETLE(r3, 0x8955, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x4, 0x3, 0x9, 0x0, 0x6, 0x2418, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0xffffffffffff7fff}, 0x41, 0x4, 0x4, 0x0, 0x6, 0x9293, 0x10, 0x0, 0x6, 0x0, 0x80000001}, r3, 0x3, 0xffffffffffffffff, 0xa) 457.975769ms ago: executing program 2 (id=7244): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff22d, 0x1, @perf_bp={&(0x7f0000000400), 0x2}, 0x101440, 0x0, 0x0, 0x0, 0x64e, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/91, 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012", 0x33}], 0x1}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x17, &(0x7f0000000040), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x6, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) 424.4143ms ago: executing program 1 (id=7245): socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x6}}}, 0x80, 0x0}, 0x2004b761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, &(0x7f0000000740)}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) mkdirat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x1}) ioctl$TUNGETVNETBE(r4, 0x8927, &(0x7f0000000000)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8800) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='devices.list\x00', 0x100002, 0x0) 422.44016ms ago: executing program 3 (id=7246): r0 = socket$kcm(0xa, 0x2, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) (async) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f00000000c0)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x80, 0x104, 0x36, "ff35a911ddc5f6e268caca97edbbb0918950635ca946f195efeca717f5a83361335fdcddd4e781a51e0096c662f07ae2071c8b7cac1edb4720144ca6d28dd49839ee9a2275759e4e74286b70d938e1b4b4c5f47b0ca8e1f7776d50a2258b336908839557e716f08a2a346085954e5407"}], 0x80}, 0x0) 352.362672ms ago: executing program 0 (id=7247): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000)=r1, 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)}], 0x1}, 0x4000040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2b, 'blkio'}, {0x2b, 'freezer'}, {0x2b, 'devices'}, {0x2b, 'rlimit'}]}, 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 351.315452ms ago: executing program 4 (id=7248): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x20000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0x5, 0x5}]}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000010c0)=""/217, 0x46, 0xd9, 0x1}, 0x28) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000001c0), 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="e51d0f00"}) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000070085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x1, 0x1, 0x6, 0xe, 0x0, 0x34, 0x10020, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe2a, 0x4, @perf_config_ext={0x68c, 0x2}, 0x0, 0x0, 0x2, 0x6, 0x45de, 0x2, 0xce9e, 0x0, 0x8, 0x0, 0xcba}, 0xffffffffffffffff, 0x7, r3, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=7249): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) (async) kernel console output (not intermixed with test programs): an active interface with an up link [ 1085.411808][T26154] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.5756'. [ 1085.454243][T26089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.581268][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 1085.704623][T26154] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.5756'. [ 1085.759086][T26089] team0: Port device team_slave_0 added [ 1085.794827][T26154] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.5756'. [ 1085.900032][T26089] team0: Port device team_slave_1 added [ 1085.999252][T26089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.036183][T26089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.100525][T26089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.169080][T26089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.184123][T26089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.235453][T26089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.396174][T26089] device hsr_slave_0 entered promiscuous mode [ 1086.414288][T26089] device hsr_slave_1 entered promiscuous mode [ 1086.470623][T26089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1086.490619][T26089] Cannot create hsr debugfs directory [ 1086.539159][T26188] netlink: 'syz.4.5764': attribute type 21 has an invalid length. [ 1086.746474][T26190] À: port 1(vlan0) entered blocking state [ 1086.753087][T26190] À: port 1(vlan0) entered disabled state [ 1086.760385][T26190] device vlan0 entered promiscuous mode [ 1086.813000][T26192] netlink: 'syz.4.5765': attribute type 7 has an invalid length. [ 1086.985601][T26197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5766'. [ 1086.995515][T26197] net_ratelimit: 37 callbacks suppressed [ 1086.995528][T26197] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check. [ 1087.453454][T26216] netlink: 'syz.2.5769': attribute type 4 has an invalid length. [ 1087.461749][T26216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1087.661015][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 1087.766119][T26222] netlink: 'syz.0.5770': attribute type 21 has an invalid length. [ 1087.775390][T26225] tipc: Started in network mode [ 1087.780286][T26225] tipc: Node identity 9215a268, cluster identity 4711 [ 1087.788300][T26225] tipc: Node number set to 2450891368 [ 1087.977806][T26236] device bridge0 entered promiscuous mode [ 1088.389615][T26249] netlink: 'syz.4.5774': attribute type 2 has an invalid length. [ 1088.486374][T26249] netlink: 'syz.4.5774': attribute type 1 has an invalid length. [ 1088.541416][T26249] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5774'. [ 1088.796375][T23000] device hsr_slave_0 left promiscuous mode [ 1088.833462][T23000] device hsr_slave_1 left promiscuous mode [ 1088.859473][T23000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.886937][T23000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.907447][T23000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.931149][T23000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.950373][T23000] bridge0: port 3(team0) entered disabled state [ 1088.991844][T23000] device bridge_slave_0 left promiscuous mode [ 1089.011912][T23000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.081857][T23000] device veth0_macvtap left promiscuous mode [ 1089.087985][T23000] device veth1_vlan left promiscuous mode [ 1089.107298][T23000] device veth0_vlan left promiscuous mode [ 1089.476826][T23000] device geneve1 left promiscuous mode [ 1089.486761][T23000] team0 (unregistering): Port device geneve1 removed [ 1089.743782][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 1089.867269][T23000] device team_slave_1 left promiscuous mode [ 1089.875231][T23000] team0 (unregistering): Port device team_slave_1 removed [ 1089.918793][T23000] device team_slave_0 left promiscuous mode [ 1089.925618][T23000] team0 (unregistering): Port device team_slave_0 removed [ 1090.384623][T26274] netlink: 'syz.4.5781': attribute type 1 has an invalid length. [ 1090.407778][T26274] netlink: 'syz.4.5781': attribute type 4 has an invalid length. [ 1090.436758][T26274] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5781'. [ 1090.523978][T26279] device syzkaller0 entered promiscuous mode [ 1093.038530][T26089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1093.098588][T26089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1093.184325][T26089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1093.234628][T26089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1093.627274][T26089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.698563][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1093.709277][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1093.729624][T26089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.763763][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1093.774939][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1093.784961][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.792118][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.823389][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1093.831897][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1093.854607][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1093.871611][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.878729][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.891968][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1093.907831][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1093.943098][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1093.992464][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1094.009992][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1094.029183][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1094.068479][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1094.086827][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1094.110686][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1094.132937][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1094.191397][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1094.229249][T26089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1094.325712][T26368] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5803'. [ 1094.745864][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1094.763521][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1094.786896][T26089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.836098][ T5727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1094.848471][ T5727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1094.896146][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1094.905226][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1094.924487][T26089] device veth0_vlan entered promiscuous mode [ 1094.933972][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1094.956840][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1094.984556][T26089] device veth1_vlan entered promiscuous mode [ 1095.024098][ T5727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1095.040547][ T5727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1095.076788][ T5727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1095.086790][ T5727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1095.108494][T26089] device veth0_macvtap entered promiscuous mode [ 1095.132595][T26089] device veth1_macvtap entered promiscuous mode [ 1095.157592][T26089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1095.175838][T26089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.190529][T26089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.205519][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1095.217356][T22274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1095.231821][T26089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.249412][T26089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.260020][T26089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.289133][T26089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.301405][T26089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.313671][T26089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.325158][T26089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.336539][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1095.361770][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1095.373222][T26089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.387607][T26089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.398231][T26089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.412329][T26089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.333247][T26342] delete_channel: no stack [ 1096.543998][T26390] netlink: 'syz.0.5804': attribute type 4 has an invalid length. [ 1096.567042][T26390] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5804'. [ 1096.671072][ T8123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.686732][ T8123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.823039][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1096.871747][ T8123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.931679][ T8123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.978478][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1097.563985][T26415] netlink: 'syz.4.5810': attribute type 2 has an invalid length. [ 1097.577960][T26415] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.5810'. [ 1097.730190][T26427] netlink: 'syz.3.5814': attribute type 3 has an invalid length. [ 1097.751018][T26427] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1097.808435][T26427] netlink: 'syz.3.5814': attribute type 21 has an invalid length. [ 1097.828335][T26430] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5816'. [ 1097.829953][T26427] netlink: 'syz.3.5814': attribute type 6 has an invalid length. [ 1097.847241][T26431] netlink: 'syz.1.5815': attribute type 29 has an invalid length. [ 1097.856139][T26427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5814'. [ 1097.872794][T26431] netlink: 'syz.1.5815': attribute type 29 has an invalid length. [ 1097.956809][T26432] netlink: 'syz.1.5815': attribute type 29 has an invalid length. [ 1097.999819][T26434] netlink: 'syz.1.5815': attribute type 29 has an invalid length. [ 1098.055464][T26437] netlink: 'syz.1.5815': attribute type 29 has an invalid length. [ 1098.397115][T26446] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1099.077971][T26452] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.5821'. [ 1099.419865][T26464] FAULT_INJECTION: forcing a failure. [ 1099.419865][T26464] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.458853][T26464] CPU: 0 PID: 26464 Comm: syz.2.5824 Not tainted syzkaller #0 [ 1099.466366][T26464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1099.476435][T26464] Call Trace: [ 1099.479731][T26464] [ 1099.482679][T26464] dump_stack_lvl+0x188/0x24e [ 1099.487387][T26464] ? show_regs_print_info+0x12/0x12 [ 1099.492614][T26464] ? load_image+0x410/0x410 [ 1099.497145][T26464] ? __might_sleep+0xd0/0xd0 [ 1099.501754][T26464] ? __lock_acquire+0x7c40/0x7c40 [ 1099.506809][T26464] should_fail_ex+0x390/0x4c0 [ 1099.511519][T26464] should_failslab+0x5/0x20 [ 1099.516045][T26464] slab_pre_alloc_hook+0x59/0x300 [ 1099.521106][T26464] kmem_cache_alloc_lru+0x49/0x2e0 [ 1099.526234][T26464] ? __d_alloc+0x2e/0x6e0 [ 1099.530596][T26464] __d_alloc+0x2e/0x6e0 [ 1099.534783][T26464] ? d_alloc_pseudo+0xe/0x70 [ 1099.539397][T26464] d_alloc_pseudo+0x19/0x70 [ 1099.543925][T26464] alloc_file_pseudo+0xe0/0x200 [ 1099.548806][T26464] ? alloc_empty_file_noaccount+0x80/0x80 [ 1099.554548][T26464] ? alloc_fd+0x590/0x640 [ 1099.558945][T26464] anon_inode_getfd+0xc6/0x1b0 [ 1099.563897][T26464] btf_new_fd+0x5d3/0x760 [ 1099.568255][T26464] __sys_bpf+0x612/0x780 [ 1099.572527][T26464] ? bpf_link_show_fdinfo+0x380/0x380 [ 1099.577942][T26464] ? lock_chain_count+0x20/0x20 [ 1099.582828][T26464] __x64_sys_bpf+0x78/0x90 [ 1099.587256][T26464] do_syscall_64+0x4c/0xa0 [ 1099.591668][T26464] ? clear_bhb_loop+0x60/0xb0 [ 1099.596334][T26464] ? clear_bhb_loop+0x60/0xb0 [ 1099.601007][T26464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.606890][T26464] RIP: 0033:0x7ff58599e159 [ 1099.611298][T26464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.630906][T26464] RSP: 002b:00007ff5867a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1099.639327][T26464] RAX: ffffffffffffffda RBX: 00007ff585c25fa0 RCX: 00007ff58599e159 [ 1099.647288][T26464] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 1099.655248][T26464] RBP: 00007ff5867a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.663229][T26464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.671210][T26464] R13: 00007ff585c26038 R14: 00007ff585c25fa0 R15: 00007ffce3785fc8 [ 1099.679192][T26464] [ 1099.980100][T26484] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5830'. [ 1100.579994][T26505] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5833'. [ 1101.097136][T26509] FAULT_INJECTION: forcing a failure. [ 1101.097136][T26509] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.139009][T26509] CPU: 0 PID: 26509 Comm: syz.4.5835 Not tainted syzkaller #0 [ 1101.146549][T26509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.156614][T26509] Call Trace: [ 1101.159895][T26509] [ 1101.162821][T26509] dump_stack_lvl+0x188/0x24e [ 1101.167507][T26509] ? show_regs_print_info+0x12/0x12 [ 1101.172707][T26509] ? load_image+0x410/0x410 [ 1101.177212][T26509] ? __might_sleep+0xd0/0xd0 [ 1101.181796][T26509] ? __lock_acquire+0x7c40/0x7c40 [ 1101.186819][T26509] ? trace_event_raw_event_lock+0x230/0x230 [ 1101.192715][T26509] should_fail_ex+0x390/0x4c0 [ 1101.197399][T26509] should_failslab+0x5/0x20 [ 1101.201901][T26509] slab_pre_alloc_hook+0x59/0x300 [ 1101.206926][T26509] kmem_cache_alloc+0x56/0x2f0 [ 1101.211685][T26509] ? __alloc_file+0x25/0x230 [ 1101.216275][T26509] __alloc_file+0x25/0x230 [ 1101.220689][T26509] alloc_empty_file+0x90/0x180 [ 1101.225450][T26509] alloc_file+0x5b/0x5f0 [ 1101.229691][T26509] alloc_file_pseudo+0x180/0x200 [ 1101.234626][T26509] ? alloc_empty_file_noaccount+0x80/0x80 [ 1101.240353][T26509] ? alloc_fd+0x590/0x640 [ 1101.244692][T26509] anon_inode_getfd+0xc6/0x1b0 [ 1101.249459][T26509] btf_new_fd+0x5d3/0x760 [ 1101.253796][T26509] __sys_bpf+0x612/0x780 [ 1101.258037][T26509] ? bpf_link_show_fdinfo+0x380/0x380 [ 1101.263416][T26509] ? lock_chain_count+0x20/0x20 [ 1101.268272][T26509] __x64_sys_bpf+0x78/0x90 [ 1101.272689][T26509] do_syscall_64+0x4c/0xa0 [ 1101.277105][T26509] ? clear_bhb_loop+0x60/0xb0 [ 1101.281782][T26509] ? clear_bhb_loop+0x60/0xb0 [ 1101.286478][T26509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1101.292385][T26509] RIP: 0033:0x7f5ce279e159 [ 1101.296810][T26509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.316428][T26509] RSP: 002b:00007f5ce3732028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1101.324853][T26509] RAX: ffffffffffffffda RBX: 00007f5ce2a25fa0 RCX: 00007f5ce279e159 [ 1101.332823][T26509] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 1101.340790][T26509] RBP: 00007f5ce3732090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.348756][T26509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1101.356722][T26509] R13: 00007f5ce2a26038 R14: 00007f5ce2a25fa0 R15: 00007ffdca98cd08 [ 1101.364704][T26509] [ 1101.564832][T26524] netlink: 'syz.0.5838': attribute type 3 has an invalid length. [ 1101.591775][T26524] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.5838'. [ 1101.643577][T26524] netlink: 'syz.0.5838': attribute type 3 has an invalid length. [ 1101.644952][T26517] device syzkaller0 entered promiscuous mode [ 1101.670510][T26524] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.5838'. [ 1101.790293][T26533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.797620][T26533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.813854][T26563] FAULT_INJECTION: forcing a failure. [ 1102.813854][T26563] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.876734][T26563] CPU: 1 PID: 26563 Comm: syz.4.5848 Not tainted syzkaller #0 [ 1102.884253][T26563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.894330][T26563] Call Trace: [ 1102.897631][T26563] [ 1102.900574][T26563] dump_stack_lvl+0x188/0x24e [ 1102.905295][T26563] ? show_regs_print_info+0x12/0x12 [ 1102.910528][T26563] ? load_image+0x410/0x410 [ 1102.915145][T26563] ? __might_sleep+0xd0/0xd0 [ 1102.919756][T26563] ? __lock_acquire+0x7c40/0x7c40 [ 1102.924812][T26563] should_fail_ex+0x390/0x4c0 [ 1102.929518][T26563] should_failslab+0x5/0x20 [ 1102.934043][T26563] slab_pre_alloc_hook+0x59/0x300 [ 1102.939094][T26563] kmem_cache_alloc+0x56/0x2f0 [ 1102.943877][T26563] ? security_file_alloc+0x30/0x110 [ 1102.949104][T26563] security_file_alloc+0x30/0x110 [ 1102.954153][T26563] __alloc_file+0xc2/0x230 [ 1102.958595][T26563] alloc_empty_file+0x90/0x180 [ 1102.963384][T26563] alloc_file+0x5b/0x5f0 [ 1102.967652][T26563] alloc_file_pseudo+0x180/0x200 [ 1102.972595][T26563] ? alloc_empty_file_noaccount+0x80/0x80 [ 1102.978316][T26563] ? alloc_fd+0x590/0x640 [ 1102.982660][T26563] anon_inode_getfd+0xc6/0x1b0 [ 1102.987451][T26563] btf_new_fd+0x5d3/0x760 [ 1102.991789][T26563] __sys_bpf+0x612/0x780 [ 1102.996037][T26563] ? bpf_link_show_fdinfo+0x380/0x380 [ 1103.001456][T26563] ? lock_chain_count+0x20/0x20 [ 1103.006332][T26563] __x64_sys_bpf+0x78/0x90 [ 1103.010758][T26563] do_syscall_64+0x4c/0xa0 [ 1103.015182][T26563] ? clear_bhb_loop+0x60/0xb0 [ 1103.019875][T26563] ? clear_bhb_loop+0x60/0xb0 [ 1103.024579][T26563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1103.030478][T26563] RIP: 0033:0x7f5ce279e159 [ 1103.034896][T26563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.054513][T26563] RSP: 002b:00007f5ce3732028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1103.062925][T26563] RAX: ffffffffffffffda RBX: 00007f5ce2a25fa0 RCX: 00007f5ce279e159 [ 1103.070897][T26563] RDX: 0000000000000028 RSI: 0000200000000300 RDI: 0000000000000012 [ 1103.078870][T26563] RBP: 00007f5ce3732090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.086840][T26563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1103.094805][T26563] R13: 00007f5ce2a26038 R14: 00007f5ce2a25fa0 R15: 00007ffdca98cd08 [ 1103.102787][T26563] [ 1103.149276][T26561] netlink: 'syz.0.5849': attribute type 21 has an invalid length. [ 1103.157665][T26561] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5849'. [ 1103.171623][T26561] netlink: 'syz.0.5849': attribute type 5 has an invalid length. [ 1103.406405][T26569] netlink: 'syz.1.5850': attribute type 39 has an invalid length. [ 1103.467160][T26579] netlink: 'syz.4.5852': attribute type 3 has an invalid length. [ 1103.579007][T26579] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5852'. [ 1103.715795][T26585] netlink: 'syz.4.5852': attribute type 21 has an invalid length. [ 1103.725096][T26585] netlink: 'syz.4.5852': attribute type 6 has an invalid length. [ 1103.736289][T26585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5852'. [ 1104.048295][T26598] netlink: 'syz.4.5858': attribute type 1 has an invalid length. [ 1104.064164][T26598] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5858'. [ 1104.393476][T26614] FAULT_INJECTION: forcing a failure. [ 1104.393476][T26614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.412594][T26614] CPU: 0 PID: 26614 Comm: syz.4.5862 Not tainted syzkaller #0 [ 1104.420098][T26614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1104.430171][T26614] Call Trace: [ 1104.433469][T26614] [ 1104.436418][T26614] dump_stack_lvl+0x188/0x24e [ 1104.441128][T26614] ? show_regs_print_info+0x12/0x12 [ 1104.446356][T26614] ? load_image+0x410/0x410 [ 1104.450886][T26614] ? __lock_acquire+0x7c40/0x7c40 [ 1104.455940][T26614] ? snprintf+0xe5/0x140 [ 1104.460206][T26614] should_fail_ex+0x390/0x4c0 [ 1104.464912][T26614] _copy_to_user+0x2c/0x130 [ 1104.469425][T26614] simple_read_from_buffer+0xe3/0x150 [ 1104.474809][T26614] proc_fail_nth_read+0x1a6/0x220 [ 1104.479837][T26614] ? proc_fault_inject_write+0x310/0x310 [ 1104.485473][T26614] ? fsnotify_perm+0x248/0x550 [ 1104.490238][T26614] ? proc_fault_inject_write+0x310/0x310 [ 1104.495871][T26614] vfs_read+0x2db/0x960 [ 1104.500063][T26614] ? kernel_read+0x1e0/0x1e0 [ 1104.504671][T26614] ? __fget_files+0x28/0x460 [ 1104.509274][T26614] ? __fget_files+0x3fc/0x460 [ 1104.513982][T26614] ? __fdget_pos+0x2ae/0x360 [ 1104.518580][T26614] ? ksys_read+0x70/0x260 [ 1104.522934][T26614] ksys_read+0x14d/0x260 [ 1104.527197][T26614] ? vfs_write+0x9a0/0x9a0 [ 1104.531626][T26614] ? lockdep_hardirqs_on+0x94/0x140 [ 1104.536840][T26614] do_syscall_64+0x4c/0xa0 [ 1104.541263][T26614] ? clear_bhb_loop+0x60/0xb0 [ 1104.545942][T26614] ? clear_bhb_loop+0x60/0xb0 [ 1104.550629][T26614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.556523][T26614] RIP: 0033:0x7f5ce275e98e [ 1104.560941][T26614] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1104.580549][T26614] RSP: 002b:00007f5ce3731fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1104.588962][T26614] RAX: ffffffffffffffda RBX: 00007f5ce37326c0 RCX: 00007f5ce275e98e [ 1104.596950][T26614] RDX: 000000000000000f RSI: 00007f5ce37320a0 RDI: 0000000000000003 [ 1104.604922][T26614] RBP: 00007f5ce3732090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.612888][T26614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.620860][T26614] R13: 00007f5ce2a26038 R14: 00007f5ce2a25fa0 R15: 00007ffdca98cd08 [ 1104.628859][T26614] [ 1104.802772][T26621] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5864'. [ 1104.833362][T26621] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1104.870358][T26624] netlink: 'syz.4.5865': attribute type 21 has an invalid length. [ 1104.886360][T26624] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5865'. [ 1104.897420][T26624] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5865'. [ 1105.028553][T26624] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5865'. [ 1106.831478][T26676] validate_nla: 6 callbacks suppressed [ 1106.831516][T26676] netlink: 'syz.0.5879': attribute type 10 has an invalid length. [ 1106.900468][T26676] team0: Port device virt_wifi0 added [ 1107.415411][T26695] device syzkaller0 entered promiscuous mode [ 1107.941876][T26715] netlink: 'syz.3.5887': attribute type 1 has an invalid length. [ 1107.986137][T26715] __nla_validate_parse: 3 callbacks suppressed [ 1107.986155][T26715] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.5887'. [ 1111.355589][T26700] device pim6reg1 entered promiscuous mode [ 1111.700633][T26732] netlink: 'syz.3.5893': attribute type 10 has an invalid length. [ 1111.736214][T26732] team0: Port device virt_wifi0 added [ 1111.764051][T26735] netlink: 'syz.0.5894': attribute type 10 has an invalid length. [ 1111.772594][T26735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1111.784655][T26735] device ipvlan1 entered promiscuous mode [ 1111.797532][T26735] bridge0: port 3(ipvlan1) entered blocking state [ 1111.804781][T26735] bridge0: port 3(ipvlan1) entered disabled state [ 1111.817777][T26735] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1111.870448][T26742] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1112.078312][T26757] netlink: 'syz.0.5899': attribute type 21 has an invalid length. [ 1112.111207][T26757] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5899'. [ 1112.120539][T26757] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5899'. [ 1112.285689][T26757] netlink: 'syz.0.5899': attribute type 3 has an invalid length. [ 1112.295895][T26757] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5899'. [ 1112.555825][T26767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5902'. [ 1112.605728][T26767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5902'. [ 1112.629455][T26767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5902'. [ 1112.678845][T26767] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5902'. [ 1112.742146][T26770] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1113.413776][T26786] netlink: 'syz.2.5909': attribute type 6 has an invalid length. [ 1113.429968][T26786] __nla_validate_parse: 1 callbacks suppressed [ 1113.429985][T26786] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5909'. [ 1114.175559][T26795] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1114.313724][T26803] netlink: 'syz.3.5914': attribute type 39 has an invalid length. [ 1114.817006][T26803] device hsr_slave_1 left promiscuous mode [ 1115.914147][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.920477][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.652437][T26825] netlink: 'syz.4.5916': attribute type 10 has an invalid length. [ 1116.663584][T26825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5916'. [ 1116.675539][T26825] device ipvlan1 entered promiscuous mode [ 1116.689929][T26825] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1117.040644][T26844] netlink: 'syz.0.5925': attribute type 10 has an invalid length. [ 1117.119762][T26844] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1117.955890][T26864] netlink: 'syz.0.5928': attribute type 13 has an invalid length. [ 1117.970301][T26864] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1118.296606][T26862] device syzkaller0 entered promiscuous mode [ 1118.389610][T26872] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1118.497523][T26877] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5932'. [ 1119.217280][T26913] netlink: 'syz.0.5943': attribute type 13 has an invalid length. [ 1123.706257][T26958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5955'. [ 1124.625550][T26992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5966'. [ 1124.643249][T26999] netlink: 'syz.3.5967': attribute type 10 has an invalid length. [ 1124.827887][T26999] team0: Port device geneve1 added [ 1125.045944][T27004] netlink: 'syz.3.5967': attribute type 27 has an invalid length. [ 1125.088957][T27004] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5967'. [ 1125.139773][T27004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1125.279514][T27019] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5971'. [ 1125.779962][T27041] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5978'. [ 1126.226116][T27061] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5984'. [ 1128.869397][T27043] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1128.885388][T27043] bridge: RTM_NEWNEIGH with invalid ether address [ 1129.069241][T27068] netlink: 'syz.0.5986': attribute type 3 has an invalid length. [ 1129.105750][T27068] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1129.302767][T27075] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1129.379212][T27074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1129.453018][ T4286] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1130.119607][T27103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1130.355285][T27112] netlink: 'syz.0.5997': attribute type 10 has an invalid length. [ 1130.573639][T27112] team0: Port device geneve1 added [ 1130.607440][T27117] netlink: 'syz.0.5997': attribute type 27 has an invalid length. [ 1130.634752][T27117] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5997'. [ 1130.654184][T27117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1131.099605][T27130] netlink: 'syz.2.6001': attribute type 2 has an invalid length. [ 1131.161014][T27130] netlink: 'syz.2.6001': attribute type 11 has an invalid length. [ 1131.189315][T27130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6001'. [ 1131.501112][ T4286] Bluetooth: hci0: command 0x2016 tx timeout [ 1132.308248][T27167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1132.357220][T27167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1132.500015][T27178] netlink: 'syz.2.6015': attribute type 2 has an invalid length. [ 1132.518786][T27178] netlink: 'syz.2.6015': attribute type 1 has an invalid length. [ 1132.556448][T27178] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1132.986509][T27193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1134.418562][T27223] netlink: 'syz.2.6026': attribute type 21 has an invalid length. [ 1134.465294][T27223] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6026'. [ 1134.520544][T27223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6026'. [ 1135.168898][T27236] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6031'. [ 1135.890175][T27270] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check. [ 1137.232461][T27314] netlink: 'syz.0.6048': attribute type 3 has an invalid length. [ 1137.245718][T27314] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6048'. [ 1137.279544][T27320] netlink: 'syz.0.6048': attribute type 3 has an invalid length. [ 1137.288150][T27320] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6048'. [ 1137.380297][T27321] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1138.683597][T27327] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6051'. [ 1139.656401][T27353] netlink: 'syz.1.6058': attribute type 17 has an invalid length. [ 1139.715844][T27353] netlink: 'syz.1.6058': attribute type 16 has an invalid length. [ 1139.755692][T27353] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6058'. [ 1140.118624][T27375] netlink: 'syz.3.6062': attribute type 29 has an invalid length. [ 1140.177819][T27375] netlink: 'syz.3.6062': attribute type 29 has an invalid length. [ 1140.233196][T27376] netlink: 'syz.3.6062': attribute type 29 has an invalid length. [ 1140.294525][T27375] netlink: 'syz.3.6062': attribute type 29 has an invalid length. [ 1140.333964][T27379] netlink: 'syz.3.6062': attribute type 29 has an invalid length. [ 1140.394703][T27375] netlink: 'syz.3.6062': attribute type 39 has an invalid length. [ 1141.004195][T27388] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6065'. [ 1141.016855][T27391] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1141.524667][T27408] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6072'. [ 1141.710823][T27407] delete_channel: no stack [ 1142.874740][T27444] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6083'. [ 1145.643753][T27483] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.6093'. [ 1145.940514][T27493] validate_nla: 4 callbacks suppressed [ 1145.940647][T27493] netlink: 'syz.4.6096': attribute type 2 has an invalid length. [ 1146.185001][T27493] device 0 entered promiscuous mode [ 1146.523491][T27504] netlink: 'syz.3.6101': attribute type 2 has an invalid length. [ 1146.551742][T27504] netlink: 'syz.3.6101': attribute type 8 has an invalid length. [ 1146.580418][T27504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6101'. [ 1146.642297][T27503] delete_channel: no stack [ 1146.829682][T27534] netlink: 'syz.0.6107': attribute type 10 has an invalid length. [ 1146.851115][T27534] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1146.931406][T27534] team0: Port device virt_wifi0 removed [ 1146.963859][T27539] netlink: 'syz.0.6107': attribute type 10 has an invalid length. [ 1146.972024][T27539] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6107'. [ 1147.745035][T27550] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6111'. [ 1148.780214][T27577] netlink: 'syz.3.6118': attribute type 16 has an invalid length. [ 1148.822249][T27577] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6118'. [ 1149.522615][T27589] netlink: 'syz.0.6121': attribute type 21 has an invalid length. [ 1149.530600][T27589] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6121'. [ 1149.550508][T27592] netlink: 'syz.3.6118': attribute type 10 has an invalid length. [ 1149.558824][T27592] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.6118'. [ 1149.837618][T27607] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6126'. [ 1149.990401][T27622] netlink: 'syz.2.6127': attribute type 3 has an invalid length. [ 1150.021807][T27622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6127'. [ 1150.426298][T27639] delete_channel: no stack [ 1150.638207][T27642] netlink: zone id is out of range [ 1150.672958][T27642] netlink: zone id is out of range [ 1150.678146][T27642] netlink: zone id is out of range [ 1150.729229][T27642] netlink: zone id is out of range [ 1150.777784][T27642] netlink: zone id is out of range [ 1150.831013][T27642] netlink: zone id is out of range [ 1150.842805][T27642] netlink: zone id is out of range [ 1150.870027][T27642] netlink: zone id is out of range [ 1150.911021][T27642] netlink: zone id is out of range [ 1150.927912][T27642] netlink: zone id is out of range [ 1151.089458][T27669] netlink: 'syz.2.6139': attribute type 3 has an invalid length. [ 1151.152657][T27669] __nla_validate_parse: 1 callbacks suppressed [ 1151.152674][T27669] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1151.166520][T27657] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6136'. [ 1151.252276][T27672] netlink: 'syz.3.6140': attribute type 2 has an invalid length. [ 1151.260607][T27672] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.6140'. [ 1152.015490][T27716] netlink: 'syz.1.6152': attribute type 29 has an invalid length. [ 1152.038012][T27716] netlink: 'syz.1.6152': attribute type 3 has an invalid length. [ 1152.081726][T27716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1152.116163][T27719] netlink: 'syz.0.6153': attribute type 33 has an invalid length. [ 1152.132776][T27719] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6153'. [ 1152.174480][T27725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1152.217448][T27719] netlink: 'syz.0.6153': attribute type 10 has an invalid length. [ 1152.239308][T27719] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6153'. [ 1153.013377][T27722] delete_channel: no stack [ 1153.576634][T27744] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1153.603726][T27749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1153.611066][T27749] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.618337][T27749] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.896584][T27763] device syzkaller0 entered promiscuous mode [ 1154.044512][ T5718] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1154.478216][ T4274] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 1154.478251][ T4274] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1154.984159][T27802] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.6171'. [ 1155.006394][T27802] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.6171'. [ 1155.403667][T27786] device syzkaller0 entered promiscuous mode [ 1158.351039][T27830] mac80211_hwsim hwsim67 ªªªªª@: renamed from wlan0 [ 1158.525636][T27850] netlink: 'syz.0.6182': attribute type 10 has an invalid length. [ 1158.533617][T27850] __nla_validate_parse: 4 callbacks suppressed [ 1158.533629][T27850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6182'. [ 1158.578243][T27858] netlink: 'syz.2.6183': attribute type 2 has an invalid length. [ 1158.622705][T27850] team0: Port device geneve0 added [ 1161.548217][T27861] netlink: 'syz.0.6182': attribute type 10 has an invalid length. [ 1161.556221][T27861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6182'. [ 1161.583327][T27858] device 0 entered promiscuous mode [ 1161.810786][T27868] device syzkaller0 entered promiscuous mode [ 1163.870389][T27884] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.6189'. [ 1164.043143][T27895] netlink: 'syz.3.6191': attribute type 10 has an invalid length. [ 1164.660509][T27895] team0: Device wg1 is of different type [ 1165.134471][T27912] netlink: 'syz.1.6195': attribute type 1 has an invalid length. [ 1165.172158][T27912] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6195'. [ 1165.172169][T27914] mac80211_hwsim hwsim39 ªªªªª@: renamed from wlan0 [ 1166.592753][T27951] netlink: 'syz.0.6206': attribute type 10 has an invalid length. [ 1167.373551][T27981] netlink: 'syz.3.6209': attribute type 1 has an invalid length. [ 1167.414216][T27981] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1167.521637][T27977] mac80211_hwsim hwsim37 ªªªªª@: renamed from wlan0 [ 1167.835168][T27988] netlink: 'syz.0.6212': attribute type 10 has an invalid length. [ 1168.913927][T27988] team0: Device wg1 is of different type [ 1172.094657][T28006] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6217'. [ 1174.545651][T28052] netlink: 'syz.4.6231': attribute type 10 has an invalid length. [ 1174.685337][T28052] team0: Device wg1 is of different type [ 1175.094862][T28051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.116207][T28051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.125918][ T4274] Bluetooth: hci3: ISO packet for unknown connection handle 3843 [ 1175.365251][T28051] team0: Port device batadv0 removed [ 1175.467260][T28067] netlink: 'syz.3.6230': attribute type 10 has an invalid length. [ 1176.138259][T28084] netlink: 'syz.0.6239': attribute type 3 has an invalid length. [ 1176.157476][T28084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6239'. [ 1177.346465][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.354941][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.403459][T28112] netlink: 'syz.0.6248': attribute type 10 has an invalid length. [ 1177.427387][T28114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6247'. [ 1177.453512][T28112] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.471084][T28112] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.502002][T28112] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.547138][T28112] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.870598][T28115] netlink: 'syz.2.6249': attribute type 16 has an invalid length. [ 1177.891187][T28115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1178.125212][T28127] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1178.161096][T28127] net_ratelimit: 3559 callbacks suppressed [ 1178.161162][T28127] netlink: zone id is out of range [ 1178.190994][T28127] netlink: zone id is out of range [ 1178.196201][T28127] netlink: zone id is out of range [ 1178.221230][T28127] netlink: zone id is out of range [ 1178.226460][T28127] netlink: zone id is out of range [ 1178.241667][T28127] netlink: zone id is out of range [ 1178.246904][T28127] netlink: zone id is out of range [ 1178.271087][T28127] netlink: zone id is out of range [ 1178.281263][T28127] netlink: zone id is out of range [ 1178.291204][T28127] netlink: zone id is out of range [ 1178.691755][T28132] netlink: 'syz.0.6251': attribute type 11 has an invalid length. [ 1178.700105][T28132] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6251'. [ 1178.718833][T28130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.004857][T28135] syz.0.6255[28135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1179.367953][T28150] netlink: 'syz.4.6257': attribute type 11 has an invalid length. [ 1179.421058][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 1179.597124][T28153] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1179.644273][T28153] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1180.371353][T28168] netlink: 'syz.2.6264': attribute type 13 has an invalid length. [ 1180.454481][T28168] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1180.526093][T28162] netlink: 'syz.4.6262': attribute type 10 has an invalid length. [ 1181.409346][T28162] team0: Port device geneve1 added [ 1181.458020][T28177] netlink: 'syz.0.6265': attribute type 25 has an invalid length. [ 1181.466088][T28177] netlink: 'syz.0.6265': attribute type 5 has an invalid length. [ 1181.474120][T28177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1182.889441][ T4286] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 1183.552343][T28215] netlink: 'syz.2.6278': attribute type 7 has an invalid length. [ 1187.496706][T28319] ¥: port 1(team0) entered blocking state [ 1187.520058][T28319] ¥: port 1(team0) entered disabled state [ 1187.535984][T28319] device team0 entered promiscuous mode [ 1187.560733][T28319] device team_slave_1 entered promiscuous mode [ 1187.579318][T28319] device geneve1 entered promiscuous mode [ 1187.621131][T28319] device wlan1 entered promiscuous mode [ 1187.627552][T28319] device hsr_slave_0 entered promiscuous mode [ 1187.669580][T28314] device team0 left promiscuous mode [ 1187.677333][T28314] device team_slave_1 left promiscuous mode [ 1187.697663][T28314] device geneve1 left promiscuous mode [ 1187.704509][T28314] device wlan1 left promiscuous mode [ 1187.721067][T28314] device hsr_slave_0 left promiscuous mode [ 1187.729864][T28314] ¥: port 1(team0) entered disabled state [ 1188.216779][T28335] netlink: 'syz.0.6315': attribute type 1 has an invalid length. [ 1188.231401][T28335] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6315'. [ 1189.836576][T28364] netlink: 'syz.3.6322': attribute type 41 has an invalid length. [ 1189.864617][T28364] netlink: 'syz.3.6322': attribute type 41 has an invalid length. [ 1189.934166][T28364] netlink: 'syz.3.6322': attribute type 1 has an invalid length. [ 1190.235081][T22272] tipc: Subscription rejected, illegal request [ 1190.282034][T28377] netlink: 'syz.0.6326': attribute type 10 has an invalid length. [ 1190.310041][T28377] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6326'. [ 1190.753990][T28402] netlink: 'syz.2.6330': attribute type 1 has an invalid length. [ 1190.762284][T28402] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6330'. [ 1190.955268][T28393] device syzkaller0 entered promiscuous mode [ 1193.554904][T28415] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1193.566777][T28424] netlink: 'syz.2.6334': attribute type 19 has an invalid length. [ 1193.574776][T28424] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.6334'. [ 1193.697807][T28432] device syzkaller0 entered promiscuous mode [ 1194.003452][T28458] netlink: 'syz.4.6341': attribute type 2 has an invalid length. [ 1194.121740][T28458] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6341'. [ 1194.275677][T22279] tipc: Subscription rejected, illegal request [ 1194.344953][T28466] netlink: 'syz.3.6344': attribute type 1 has an invalid length. [ 1194.353369][T28466] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6344'. [ 1195.903580][T28439] netlink: 'syz.0.6339': attribute type 2 has an invalid length. [ 1195.911730][T28439] netlink: 'syz.0.6339': attribute type 8 has an invalid length. [ 1195.919480][T28439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6339'. [ 1195.929391][T28444] netlink: 'syz.0.6339': attribute type 2 has an invalid length. [ 1195.937479][T28444] netlink: 'syz.0.6339': attribute type 8 has an invalid length. [ 1195.945278][T28444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6339'. [ 1195.955746][T28450] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1195.983975][T28456] netlink: 'syz.2.6342': attribute type 10 has an invalid length. [ 1195.990962][T28450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1196.003353][T28450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1196.022416][T28456] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6342'. [ 1196.285473][T28480] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.6348'. [ 1196.602833][T28487] netlink: 'syz.2.6352': attribute type 2 has an invalid length. [ 1196.608438][T28482] netlink: 'syz.0.6350': attribute type 3 has an invalid length. [ 1196.631181][T28482] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6350'. [ 1196.670940][T28487] netlink: 119 bytes leftover after parsing attributes in process `syz.2.6352'. [ 1197.235281][T28506] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1197.747990][T28528] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1197.778069][T28528] syzkaller1: linktype set to 0 [ 1199.098870][T28549] validate_nla: 2 callbacks suppressed [ 1199.098895][T28549] netlink: 'syz.3.6367': attribute type 3 has an invalid length. [ 1199.129155][T28549] __nla_validate_parse: 4 callbacks suppressed [ 1199.129195][T28549] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6367'. [ 1199.265439][T28564] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1199.464751][T28569] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1199.740298][T28582] netlink: 'syz.3.6373': attribute type 1 has an invalid length. [ 1199.750050][T28582] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6373'. [ 1199.750439][T28575] netlink: 'syz.1.6374': attribute type 3 has an invalid length. [ 1199.783970][T28575] netlink: 174892 bytes leftover after parsing attributes in process `syz.1.6374'. [ 1199.902569][T22272] wlan1: Trigger new scan to find an IBSS to join [ 1199.964583][T28585] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.6376'. [ 1199.981041][T28585] net_ratelimit: 156 callbacks suppressed [ 1199.981070][T28585] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1200.014559][T28585] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1200.131651][T28591] netlink: 'syz.1.6379': attribute type 11 has an invalid length. [ 1200.149963][T28591] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1200.337878][T28591] netlink: 'syz.1.6379': attribute type 21 has an invalid length. [ 1200.437175][T28591] netlink: 'syz.1.6379': attribute type 1 has an invalid length. [ 1200.502654][T28591] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1200.605335][T28590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1201.171070][T28635] netlink: 'syz.0.6390': attribute type 1 has an invalid length. [ 1201.240456][T28635] netlink: 'syz.0.6390': attribute type 1 has an invalid length. [ 1201.364753][T28635] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1201.604538][T28634] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.6388'. [ 1201.978185][T28636] netlink: 'syz.3.6389': attribute type 2 has an invalid length. [ 1202.051326][T28636] netlink: 'syz.3.6389': attribute type 1 has an invalid length. [ 1202.059694][T28636] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1202.950583][T22279] wlan1: Trigger new scan to find an IBSS to join [ 1203.518911][T28648] netlink: 'syz.2.6391': attribute type 1 has an invalid length. [ 1204.249074][T28652] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1204.279298][T28652] __nla_validate_parse: 1 callbacks suppressed [ 1204.279333][T28652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6392'. [ 1204.687403][T28665] netlink: 'syz.0.6398': attribute type 4 has an invalid length. [ 1204.716718][T28661] netlink: 'syz.2.6395': attribute type 1 has an invalid length. [ 1204.805373][T28661] netlink: 'syz.2.6395': attribute type 3 has an invalid length. [ 1204.846497][T28661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6395'. [ 1204.932541][T28681] device syzkaller0 entered promiscuous mode [ 1204.961632][T28681] netlink: 'syz.0.6400': attribute type 3 has an invalid length. [ 1204.969501][T28681] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1205.021477][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 1205.748903][T28701] netlink: 'syz.1.6405': attribute type 1 has an invalid length. [ 1205.757143][T28701] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6405'. [ 1206.165110][T28709] netlink: 'syz.3.6407': attribute type 1 has an invalid length. [ 1206.364964][T28709] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6407'. [ 1206.941927][T23643] wlan1: Trigger new scan to find an IBSS to join [ 1208.832474][T28756] netlink: 'syz.4.6421': attribute type 1 has an invalid length. [ 1208.840388][T28756] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6421'. [ 1209.270761][T28772] netlink: 'syz.3.6423': attribute type 3 has an invalid length. [ 1209.409854][T28772] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.6423'. [ 1209.779854][T28791] netlink: 'syz.4.6430': attribute type 21 has an invalid length. [ 1209.869650][T28791] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6430'. [ 1209.933639][T28791] netlink: 'syz.4.6430': attribute type 4 has an invalid length. [ 1210.165901][T28801] __sock_release: fasync list not empty! [ 1210.210807][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1210.228319][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1210.236522][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1210.245907][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1210.254115][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1210.261822][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1210.404876][T28802] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.6432'. [ 1210.490658][T28802] netlink: zone id is out of range [ 1210.641982][T28802] netlink: zone id is out of range [ 1210.648704][T28802] netlink: zone id is out of range [ 1210.661880][T28809] netlink: 'syz.4.6434': attribute type 7 has an invalid length. [ 1210.861164][T22279] wlan1: Trigger new scan to find an IBSS to join [ 1211.085335][T28803] chnl_net:caif_netlink_parms(): no params data found [ 1211.285540][T28803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.293328][T28803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.301703][T28803] device bridge_slave_0 entered promiscuous mode [ 1211.310437][T28803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.317997][T28803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.326918][T28803] device bridge_slave_1 entered promiscuous mode [ 1211.355819][T28803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.367542][T28803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.385553][T28845] netlink: 'syz.0.6438': attribute type 29 has an invalid length. [ 1211.414710][T28845] netlink: 'syz.0.6438': attribute type 29 has an invalid length. [ 1211.436368][T28845] netlink: 'syz.0.6438': attribute type 29 has an invalid length. [ 1211.499370][T28843] netlink: 'syz.3.6437': attribute type 1 has an invalid length. [ 1211.556085][T28852] netlink: 'syz.0.6440': attribute type 1 has an invalid length. [ 1211.576403][T28843] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6437'. [ 1211.586332][T28852] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6440'. [ 1211.629373][T22273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.668918][T28803] team0: Port device team_slave_0 added [ 1211.690766][T28803] team0: Port device team_slave_1 added [ 1211.736269][T28803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.748702][T28803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.868475][T28803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.891671][T22278] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1211.960203][T22273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.995050][T28860] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6442'. [ 1212.005422][T28803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.039885][T28803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.104109][T28803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.296641][T22273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.314519][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 1212.355189][T28876] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1212.393686][T28803] device hsr_slave_0 entered promiscuous mode [ 1212.400478][T28803] device hsr_slave_1 entered promiscuous mode [ 1212.408321][T28803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1212.419343][T28803] Cannot create hsr debugfs directory [ 1212.451667][T22273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.527789][T28891] netlink: 'syz.0.6449': attribute type 25 has an invalid length. [ 1212.537124][T28891] netlink: 'syz.0.6449': attribute type 29 has an invalid length. [ 1212.548665][T28891] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1212.830124][T28898] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6452'. [ 1212.851256][T28899] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6452'. [ 1212.867409][T22273] device 0 left promiscuous mode [ 1214.163375][T28803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1214.381174][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 1216.461083][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 1217.174419][T28803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1217.308665][T28803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1217.363476][T28803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1217.384971][T28957] validate_nla: 5 callbacks suppressed [ 1217.384990][T28957] netlink: 'syz.0.6464': attribute type 1 has an invalid length. [ 1217.398493][T28957] __nla_validate_parse: 2 callbacks suppressed [ 1217.398508][T28957] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1217.747393][T28803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.912969][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1217.942007][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1217.989718][T28803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.069912][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1218.131576][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1218.171114][T22277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.178291][T22277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.239003][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1218.292009][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1218.329637][T22277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.336943][T22277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.377247][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1218.401659][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1218.541155][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 1218.627037][T28993] IPv6: …: Disabled Multicast RS [ 1218.644774][T28996] netlink: 'syz.4.6474': attribute type 21 has an invalid length. [ 1218.683773][T28996] netlink: 'syz.4.6474': attribute type 13 has an invalid length. [ 1218.709945][T28996] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.6474'. [ 1218.761163][T29013] netlink: 'syz.1.6476': attribute type 22 has an invalid length. [ 1218.769030][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6476'. [ 1218.804761][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1218.815123][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1218.852049][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1218.869196][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1218.908078][T29024] netlink: 'syz.0.6477': attribute type 1 has an invalid length. [ 1218.918336][T29024] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6477'. [ 1218.955182][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1218.967882][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1219.095445][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1219.105459][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1219.133555][T28803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1219.151797][T28803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1219.168855][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1219.177702][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1219.272488][T22273] device hsr_slave_0 left promiscuous mode [ 1219.283630][T22273] device hsr_slave_1 left promiscuous mode [ 1219.341702][T22273] bridge0: port 3(dummy0) entered disabled state [ 1219.350090][T22273] bridge0: port 2(hsr0) entered disabled state [ 1219.388174][T22273] device bridge_slave_0 left promiscuous mode [ 1219.397805][T22273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.476767][T22273] device veth1_macvtap left promiscuous mode [ 1219.491142][T22273] device veth0_macvtap left promiscuous mode [ 1219.506462][T22273] device veth1_vlan left promiscuous mode [ 1220.408345][T22273] team0 (unregistering): Port device vlan0 removed [ 1220.700457][T22273] team0 (unregistering): Port device team_slave_1 removed [ 1220.742442][T22273] team0 (unregistering): Port device team_slave_0 removed [ 1220.781258][T22273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.821976][T22273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.863547][T22273] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1221.090574][T22273] bond0 (unregistering): Released all slaves [ 1221.210192][T29056] netlink: 'syz.3.6487': attribute type 10 has an invalid length. [ 1221.354309][T29065] netlink: 192852 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1221.381171][T29065] netlink: get zone limit has 4 unknown bytes [ 1221.419077][T29068] netlink: 'syz.4.6489': attribute type 1 has an invalid length. [ 1221.434975][T29068] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6489'. [ 1221.546379][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1221.553966][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1221.578793][T28803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.630808][T29071] netlink: 'syz.0.6490': attribute type 10 has an invalid length. [ 1221.727828][T29071] team0: Device gre0 is of different type [ 1224.737809][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1224.746625][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1224.872353][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1224.891367][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1224.906512][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1224.914737][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1224.929311][T28803] device veth0_vlan entered promiscuous mode [ 1224.965370][T28803] device veth1_vlan entered promiscuous mode [ 1225.030600][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1225.052059][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1225.060440][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1225.076566][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1225.090221][T28803] device veth0_macvtap entered promiscuous mode [ 1225.164019][T28803] device veth1_macvtap entered promiscuous mode [ 1225.273095][T28803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.311930][T28803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.332588][T28803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.348318][T28803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.384381][T28803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.409410][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1225.430498][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1225.482813][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1225.554386][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1225.604691][T28803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.640475][T28803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.714298][T28803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.740392][T28803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.767385][T28803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.788322][T28803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.836624][T28803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.896621][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1225.928459][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1225.961031][T29105] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1226.037160][T28803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.056243][T28803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.058652][T29116] netlink: 'syz.0.6500': attribute type 1 has an invalid length. [ 1226.078248][T29116] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6500'. [ 1226.114733][T28803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.151026][T28803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.236646][T29122] netlink: 192852 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1226.266912][T29122] netlink: get zone limit has 4 unknown bytes [ 1226.334793][T29120] netlink: 'syz.1.6503': attribute type 10 has an invalid length. [ 1226.538218][ T4274] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1226.566187][T29137] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6506'. [ 1226.586048][T29120] team0 (unregistering): Port device team_slave_1 removed [ 1226.607420][T29137] netlink: zone id is out of range [ 1226.633291][T29120] team0 (unregistering): Port device geneve1 removed [ 1226.666812][T29137] netlink: del zone limit has 4 unknown bytes [ 1226.721216][T29120] team0 (unregistering): Port device wlan1 removed [ 1226.742883][T29120] team0 (unregistering): Port device hsr_slave_0 removed [ 1227.006596][ T8531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.072028][ T8531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.126229][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1227.251783][T22277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.271987][T29156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.292023][T22277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.316455][T29156] device bridge_slave_0 left promiscuous mode [ 1227.324969][T29156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.489539][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1227.665923][T29176] netlink: 'syz.4.6514': attribute type 10 has an invalid length. [ 1227.933417][T29183] netlink: 'syz.3.6516': attribute type 1 has an invalid length. [ 1228.113698][T29183] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.6516'. [ 1228.621441][ T4274] Bluetooth: hci3: command 0x2016 tx timeout [ 1228.948433][T29216] netlink: 192852 bytes leftover after parsing attributes in process `syz.3.6521'. [ 1229.057271][T29216] netlink: get zone limit has 4 unknown bytes [ 1229.885287][ T4274] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1229.896358][ T4274] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1229.934863][ T4274] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1229.949856][ T4274] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1229.958603][ T4274] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1229.968905][ T4274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1230.026976][T29238] netlink: 'syz.0.6529': attribute type 10 has an invalid length. [ 1230.061122][T29239] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6527'. [ 1230.179832][T29241] netlink: 'syz.0.6530': attribute type 1 has an invalid length. [ 1230.201009][T29241] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6530'. [ 1230.345793][T29231] chnl_net:caif_netlink_parms(): no params data found [ 1230.416807][T29251] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1230.478132][T29251] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1230.565306][T29231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.588363][T29231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.605140][T29231] device bridge_slave_0 entered promiscuous mode [ 1230.620953][T29231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.628371][T29231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.646765][T29231] device bridge_slave_1 entered promiscuous mode [ 1230.772745][T22273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.935713][T22273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.024041][T29231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.098464][T22273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.170487][T29231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.261266][T29256] delete_channel: no stack [ 1231.548837][T22273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.623563][T29231] team0: Port device team_slave_0 added [ 1231.654671][T29231] team0: Port device team_slave_1 added [ 1231.783449][T29231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.810038][T29231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1231.926718][T29231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.974377][T29231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.008887][T29231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.061134][ T4286] Bluetooth: hci5: command 0x0409 tx timeout [ 1232.177823][T29231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.396591][T29283] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6536'. [ 1232.431566][T29231] device hsr_slave_0 entered promiscuous mode [ 1232.458558][T29231] device hsr_slave_1 entered promiscuous mode [ 1232.522690][T29231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1232.549383][T29231] Cannot create hsr debugfs directory [ 1232.784397][T22273] device 0 left promiscuous mode [ 1232.937928][T29289] device syzkaller0 entered promiscuous mode [ 1232.966710][T22273] tipc: Left network mode [ 1233.509826][T29316] netlink: 'syz.0.6541': attribute type 1 has an invalid length. [ 1233.517977][T29316] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6541'. [ 1234.145826][ T4286] Bluetooth: hci5: command 0x041b tx timeout [ 1235.540234][T29306] netlink: 'syz.1.6540': attribute type 10 has an invalid length. [ 1235.750038][T29324] netlink: 'syz.0.6544': attribute type 10 has an invalid length. [ 1236.221351][ T4286] Bluetooth: hci5: command 0x040f tx timeout [ 1237.115531][T29353] netlink: 'syz.3.6551': attribute type 10 has an invalid length. [ 1237.264025][T29353] team0 (unregistering): Port device team_slave_0 removed [ 1237.343227][T29353] team0 (unregistering): Port device team_slave_1 removed [ 1237.364852][T29363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6553'. [ 1237.420400][T29353] team0 (unregistering): Port device virt_wifi0 removed [ 1237.446275][T29353] team0 (unregistering): Port device geneve1 removed [ 1237.543799][T29371] netlink: 'syz.2.6554': attribute type 1 has an invalid length. [ 1237.566185][T29371] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6554'. [ 1237.614831][T29231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1237.664059][T29231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1237.708794][T29231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1237.738298][T29231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1237.866165][T29367] device syzkaller0 entered promiscuous mode [ 1237.992286][T29383] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1238.027507][T29383] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1238.307321][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 1238.785107][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.792151][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.283068][T29231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.317791][T29410] netlink: 'syz.0.6562': attribute type 10 has an invalid length. [ 1240.328459][T29410] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.6562'. [ 1240.367077][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1240.382125][T22278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1240.438489][T29231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.625756][T29425] netlink: 'syz.0.6564': attribute type 1 has an invalid length. [ 1240.644371][T29425] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1240.726966][T22273] team0: Port device wlan1 removed [ 1240.792997][T29414] netlink: 'syz.3.6563': attribute type 10 has an invalid length. [ 1240.821079][T29414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6563'. [ 1240.875642][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1240.896068][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1240.937187][ T8531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.944570][ T8531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.070127][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1241.087357][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1241.138861][T29429] netlink: 168220 bytes leftover after parsing attributes in process `syz.1.6565'. [ 1241.166761][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1241.175250][T29429] netlink: zone id is out of range [ 1241.180724][T29429] netlink: zone id is out of range [ 1241.212400][T29429] netlink: zone id is out of range [ 1241.219343][ T8531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.226483][ T8531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.230078][T29429] netlink: zone id is out of range [ 1241.250499][T29429] netlink: zone id is out of range [ 1241.283350][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1241.291490][T29429] netlink: zone id is out of range [ 1241.320483][T29429] netlink: zone id is out of range [ 1241.339941][T29429] netlink: zone id is out of range [ 1241.355366][T29429] netlink: zone id is out of range [ 1241.368255][T29429] netlink: zone id is out of range [ 1241.416710][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1241.441552][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1241.468693][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1241.496812][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1241.527784][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1241.541344][T29440] netlink: 'syz.0.6566': attribute type 10 has an invalid length. [ 1241.621780][T29440] team0 (unregistering): Port device team_slave_0 removed [ 1241.651737][T29440] team0 (unregistering): Port device team_slave_1 removed [ 1241.671804][T29440] team0 (unregistering): Port device geneve1 removed [ 1241.687547][T29440] team0 (unregistering): Port device geneve0 removed [ 1241.708570][T29438] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6567'. [ 1241.771036][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1241.789503][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1241.821997][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1241.840561][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1241.878718][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1241.892879][T29444] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6568'. [ 1241.936682][T22273] device hsr_slave_0 left promiscuous mode [ 1241.963984][T22273] device hsr_slave_1 left promiscuous mode [ 1241.991479][T22273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.991814][T29450] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6569'. [ 1242.019227][T22273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.050285][T22273] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1242.059668][T22273] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1242.101672][T22273] device veth1_macvtap left promiscuous mode [ 1242.108955][T22273] device veth0_macvtap left promiscuous mode [ 1242.119670][T22273] device veth1_vlan left promiscuous mode [ 1242.135335][T22273] device veth0_vlan left promiscuous mode [ 1242.328788][T29457] netlink: 'syz.3.6571': attribute type 3 has an invalid length. [ 1242.552542][T22273] team0 (unregistering): Port device geneve1 removed [ 1243.615581][T22273] team0 (unregistering): Port device team_slave_1 removed [ 1243.911653][ T8504] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1244.247627][T29463] __nla_validate_parse: 2 callbacks suppressed [ 1244.247665][T29463] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6572'. [ 1244.287214][T29463] tc_dump_action: action bad kind [ 1244.373551][T29466] netlink: 'syz.1.6573': attribute type 10 has an invalid length. [ 1244.438270][T29466] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.6573'. [ 1244.554644][T29476] netlink: 'syz.0.6576': attribute type 15 has an invalid length. [ 1244.571191][T29476] netlink: 'syz.0.6576': attribute type 16 has an invalid length. [ 1244.579046][T29476] netlink: 'syz.0.6576': attribute type 4 has an invalid length. [ 1244.600961][T29476] netlink: 'syz.0.6576': attribute type 6 has an invalid length. [ 1244.631685][T29476] netlink: 13226 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1244.737886][T29480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6577'. [ 1244.853689][T29493] device syzkaller0 entered promiscuous mode [ 1245.027302][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1245.053366][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1245.101913][T29231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.274712][T29509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1245.282023][T29509] IPv6: NLM_F_CREATE should be set when creating new route [ 1245.285755][T29511] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6580'. [ 1245.289246][T29509] IPv6: NLM_F_CREATE should be set when creating new route [ 1245.305856][T29509] IPv6: NLM_F_CREATE should be set when creating new route [ 1245.792612][T29517] validate_nla: 10 callbacks suppressed [ 1245.792647][T29517] netlink: 'syz.2.6582': attribute type 10 has an invalid length. [ 1245.932028][T29529] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.6584'. [ 1246.053556][T29529] netlink: 'syz.1.6584': attribute type 3 has an invalid length. [ 1246.121270][T29529] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6584'. [ 1247.705624][T29517] team0 (unregistering): Port device team_slave_0 removed [ 1249.147382][T29517] team0 (unregistering): Port device team_slave_1 removed [ 1249.607088][T29560] netlink: 'syz.0.6593': attribute type 1 has an invalid length. [ 1249.618959][T29560] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.6593'. [ 1251.984407][T29563] IPv6: NLM_F_CREATE should be specified when creating new route [ 1252.017902][T29563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1252.025215][T29563] IPv6: NLM_F_CREATE should be set when creating new route [ 1252.032646][T29563] IPv6: NLM_F_CREATE should be set when creating new route [ 1252.039888][T29563] IPv6: NLM_F_CREATE should be set when creating new route [ 1252.121749][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1252.130767][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1252.159643][T29231] device veth0_vlan entered promiscuous mode [ 1252.188079][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1252.202909][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1252.263301][T29231] device veth1_vlan entered promiscuous mode [ 1252.305677][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1252.335403][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1252.361666][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1252.440092][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1252.480291][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1252.500457][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1252.536522][T29231] device veth0_macvtap entered promiscuous mode [ 1252.714331][T29592] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.6604'. [ 1252.853462][T29592] netlink: 'syz.2.6604': attribute type 3 has an invalid length. [ 1252.884469][T29592] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6604'. [ 1253.265136][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1253.321409][T29591] device pim6reg1 entered promiscuous mode [ 1253.631900][T29231] device veth1_macvtap entered promiscuous mode [ 1253.713798][T29231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.738500][T29231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.788142][T29231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.809865][T29231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.825956][T29231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.836542][T29231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.854347][T29231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.866053][T29607] IPv6: NLM_F_CREATE should be specified when creating new route [ 1253.877414][T29607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1253.884676][T29607] IPv6: NLM_F_CREATE should be set when creating new route [ 1253.891974][T29607] IPv6: NLM_F_CREATE should be set when creating new route [ 1253.899196][T29607] IPv6: NLM_F_CREATE should be set when creating new route [ 1253.909661][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1253.940555][T22277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1253.956618][T29231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.968520][T29231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.978521][T29231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.990038][T29231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.005090][T29231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.016486][T29231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.033524][T29231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.050112][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1254.071413][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1254.094272][T29231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.108710][T29231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.139452][T29231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.161036][T29231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.173690][T29611] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6609'. [ 1254.469048][T29621] netlink: 'syz.0.6612': attribute type 2 has an invalid length. [ 1254.478749][T23641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.487561][T29621] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.6612'. [ 1254.487698][T23641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.548664][T23643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1254.576830][T23643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.601515][T23643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.649830][T22273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1254.843422][T29626] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6614'. [ 1255.107686][T29629] netlink: 'syz.3.6613': attribute type 3 has an invalid length. [ 1255.123211][T29629] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6613'. [ 1255.764719][T29639] netlink: 'syz.3.6617': attribute type 9 has an invalid length. [ 1255.824983][T29639] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6617'. [ 1255.904265][ T8504] wlan1: Trigger new scan to find an IBSS to join [ 1256.319084][T29666] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6621'. [ 1257.223396][T29695] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1257.265733][T29695] netlink: 'syz.0.6630': attribute type 3 has an invalid length. [ 1257.292598][T29695] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6630'. [ 1257.402733][T29698] netlink: 'syz.2.6631': attribute type 41 has an invalid length. [ 1260.861219][T23641] wlan1: Trigger new scan to find an IBSS to join [ 1261.726917][T29741] netlink: 'syz.0.6645': attribute type 21 has an invalid length. [ 1261.850929][T22277] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1261.853770][T29744] netlink: 'syz.2.6644': attribute type 27 has an invalid length. [ 1261.935054][T29744] netlink: 'syz.2.6644': attribute type 4 has an invalid length. [ 1261.969934][T29744] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6644'. [ 1262.043712][T29752] netlink: 'syz.3.6646': attribute type 16 has an invalid length. [ 1262.058589][T29752] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6646'. [ 1262.087153][T29749] netlink: 'syz.0.6648': attribute type 2 has an invalid length. [ 1262.103623][T29749] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.6648'. [ 1262.215421][T29756] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1262.274304][T29759] netlink: 'syz.0.6650': attribute type 3 has an invalid length. [ 1262.282165][T29756] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1262.282244][T29756] net_ratelimit: 239 callbacks suppressed [ 1262.282274][T29756] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1262.321743][T29759] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6650'. [ 1262.389337][T29756] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1262.420458][T29756] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1262.496492][T29756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1262.542548][T29764] netlink: 'syz.3.6651': attribute type 15 has an invalid length. [ 1262.552000][T29764] netlink: 'syz.3.6651': attribute type 7 has an invalid length. [ 1262.568659][T29768] netlink: 'syz.3.6651': attribute type 39 has an invalid length. [ 1263.060572][T29784] netlink: 'syz.4.6657': attribute type 10 has an invalid length. [ 1263.070328][T29784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.077880][T29784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.199950][T29784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.207319][T29784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.215427][T29784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.222603][T29784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.247260][T29784] team0: Port device bridge0 added [ 1263.286152][T29791] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6659'. [ 1263.714033][T29811] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.6662'. [ 1263.845549][T29828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6668'. [ 1264.678816][T29867] netlink: 'syz.2.6676': attribute type 11 has an invalid length. [ 1264.696688][T29864] netlink: 'syz.2.6676': attribute type 11 has an invalid length. [ 1267.142116][T29863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1267.674840][T29908] __nla_validate_parse: 4 callbacks suppressed [ 1267.674858][T29908] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1267.699778][T29913] tap0: tun_chr_ioctl cmd 1074025677 [ 1267.721676][T29913] tap0: linktype set to 774 [ 1267.788545][T29908] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.6685'. [ 1269.953136][T29933] tap0: tun_chr_ioctl cmd 1074025677 [ 1269.997351][T29933] tap0: linktype set to 776 [ 1270.062427][T29933] tap0: tun_chr_ioctl cmd 21731 [ 1270.163089][T29939] validate_nla: 1 callbacks suppressed [ 1270.163109][T29939] netlink: 'syz.1.6691': attribute type 27 has an invalid length. [ 1270.228219][T29939] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.6691'. [ 1270.465903][T29942] delete_channel: no stack [ 1270.469467][T29953] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6694'. [ 1270.522222][T29955] netlink: 'syz.2.6695': attribute type 21 has an invalid length. [ 1270.530261][T29955] netlink: 'syz.2.6695': attribute type 23 has an invalid length. [ 1270.573929][T29955] netlink: 'syz.2.6695': attribute type 25 has an invalid length. [ 1270.594192][T29955] netlink: 'syz.2.6695': attribute type 27 has an invalid length. [ 1270.610171][T29955] netlink: 'syz.2.6695': attribute type 28 has an invalid length. [ 1270.618669][T29955] netlink: 'syz.2.6695': attribute type 29 has an invalid length. [ 1270.644198][T29955] netlink: 'syz.2.6695': attribute type 30 has an invalid length. [ 1270.883508][T29972] FAULT_INJECTION: forcing a failure. [ 1270.883508][T29972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.926644][T29972] CPU: 1 PID: 29972 Comm: syz.4.6697 Not tainted syzkaller #0 [ 1270.934333][T29972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1270.944408][T29972] Call Trace: [ 1270.947699][T29972] [ 1270.950648][T29972] dump_stack_lvl+0x188/0x24e [ 1270.955358][T29972] ? show_regs_print_info+0x12/0x12 [ 1270.960585][T29972] ? load_image+0x410/0x410 [ 1270.965112][T29972] ? __might_fault+0xa6/0x120 [ 1270.969801][T29972] should_fail_ex+0x390/0x4c0 [ 1270.974632][T29972] copyin+0x1b/0x120 [ 1270.978538][T29972] _copy_from_iter+0x447/0x1130 [ 1270.983414][T29972] ? copyout_mc+0x110/0x110 [ 1270.987924][T29972] ? __virt_addr_valid+0x188/0x540 [ 1270.993124][T29972] ? __virt_addr_valid+0x188/0x540 [ 1270.998237][T29972] ? __virt_addr_valid+0x467/0x540 [ 1271.003353][T29972] ? __phys_addr_symbol+0x2b/0x70 [ 1271.008383][T29972] ? __check_object_size+0x4f6/0xa70 [ 1271.013675][T29972] netlink_sendmsg+0x755/0xbd0 [ 1271.018446][T29972] ? netlink_getsockopt+0x550/0x550 [ 1271.023651][T29972] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1271.029208][T29972] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1271.034497][T29972] ? security_socket_sendmsg+0x7c/0xa0 [ 1271.039959][T29972] ? netlink_getsockopt+0x550/0x550 [ 1271.045160][T29972] ____sys_sendmsg+0x5ed/0x9a0 [ 1271.049939][T29972] ? __sys_sendmsg_sock+0x30/0x30 [ 1271.054963][T29972] ? __import_iovec+0x306/0x510 [ 1271.059826][T29972] ? import_iovec+0x6f/0xa0 [ 1271.064337][T29972] ___sys_sendmsg+0x2a2/0x360 [ 1271.069028][T29972] ? __sys_sendmsg+0x2a0/0x2a0 [ 1271.073807][T29972] ? __lock_acquire+0x7c40/0x7c40 [ 1271.078851][T29972] __se_sys_sendmsg+0x1c3/0x2b0 [ 1271.083707][T29972] ? __x64_sys_sendmsg+0x80/0x80 [ 1271.088657][T29972] ? lockdep_hardirqs_on+0x94/0x140 [ 1271.093858][T29972] do_syscall_64+0x4c/0xa0 [ 1271.098274][T29972] ? clear_bhb_loop+0x60/0xb0 [ 1271.102953][T29972] ? clear_bhb_loop+0x60/0xb0 [ 1271.107670][T29972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1271.113581][T29972] RIP: 0033:0x7f1f0c79e159 [ 1271.118004][T29972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.137620][T29972] RSP: 002b:00007f1f0d6ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1271.146041][T29972] RAX: ffffffffffffffda RBX: 00007f1f0ca25fa0 RCX: 00007f1f0c79e159 [ 1271.154017][T29972] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003 [ 1271.161988][T29972] RBP: 00007f1f0d6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.169957][T29972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.177927][T29972] R13: 00007f1f0ca26038 R14: 00007f1f0ca25fa0 R15: 00007ffc43b67928 [ 1271.185915][T29972] [ 1271.499087][T29979] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6701'. [ 1271.540072][T29984] netlink: 'syz.3.6702': attribute type 4 has an invalid length. [ 1271.558474][T29984] netlink: 'syz.3.6702': attribute type 5 has an invalid length. [ 1271.587084][T29989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6703'. [ 1271.597466][T29989] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6703'. [ 1271.701206][T29995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6703'. [ 1271.741199][T29995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6703'. [ 1272.023515][T30002] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6704'. [ 1273.216403][T30051] __nla_validate_parse: 3 callbacks suppressed [ 1273.216422][T30051] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.6721'. [ 1274.115525][T22273] tipc: Subscription rejected, illegal request [ 1274.723418][T30102] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.6734'. [ 1274.897709][T30104] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.6734'. [ 1275.549807][T30114] validate_nla: 10 callbacks suppressed [ 1275.549841][T30114] netlink: 'syz.0.6737': attribute type 27 has an invalid length. [ 1275.571039][T30114] netlink: 'syz.0.6737': attribute type 3 has an invalid length. [ 1275.579002][T30114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1275.606121][T30120] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.6738'. [ 1275.608044][T30114] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6737'. [ 1275.698249][T30120] openvswitch: netlink: Flow actions attr not present in new flow. [ 1275.809464][T30131] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1275.835423][T30123] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.6738'. [ 1275.855400][T30113] delete_channel: no stack [ 1275.871820][T30123] openvswitch: netlink: Flow actions attr not present in new flow. [ 1275.877609][T30131] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1277.615740][T30216] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6759'. [ 1278.078682][T30234] Ÿ: renamed from syzkaller0 [ 1279.141094][T30248] __nla_validate_parse: 2 callbacks suppressed [ 1279.141113][T30248] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6767'. [ 1280.547680][T30264] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.6770'. [ 1281.206794][T30278] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6774'. [ 1281.473822][T30296] netlink: 'syz.1.6778': attribute type 29 has an invalid length. [ 1281.490783][T30296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6778'. [ 1281.540937][T30296] netlink: 'syz.1.6778': attribute type 29 has an invalid length. [ 1281.570464][T30296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6778'. [ 1282.844740][T30348] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6790'. [ 1282.890054][T30341] tipc: Started in network mode [ 1282.897554][T30341] tipc: Node identity 9215a268, cluster identity 4711 [ 1282.918386][T30341] tipc: Node number set to 2450891368 [ 1283.340033][T30357] netlink: 'syz.1.6796': attribute type 21 has an invalid length. [ 1283.357836][T30357] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6796'. [ 1283.515384][T30376] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6798'. [ 1284.303410][T30387] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.6800'. [ 1284.324391][T30389] netlink: 'syz.2.6802': attribute type 16 has an invalid length. [ 1284.338957][T30389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6802'. [ 1284.390065][T30391] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1284.905395][T30418] netlink: 'syz.3.6808': attribute type 2 has an invalid length. [ 1284.964610][T30418] netlink: 'syz.3.6808': attribute type 8 has an invalid length. [ 1285.044764][T30423] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1285.073654][T30418] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1285.130216][T30423] bond0: (slave bond_slave_0): Releasing backup interface [ 1285.193829][T30423] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1285.213096][T30426] netlink: 'syz.0.6811': attribute type 10 has an invalid length. [ 1285.224485][T30426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1285.251666][T30426] device veth0_vlan left promiscuous mode [ 1285.267974][T30426] device veth0_vlan entered promiscuous mode [ 1285.297452][T30426] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1285.335897][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1285.352577][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1285.487312][T30436] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6815'. [ 1285.532218][T30438] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6816'. [ 1285.925992][T30456] netlink: 'syz.0.6821': attribute type 1 has an invalid length. [ 1285.937414][T30456] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6821'. [ 1286.535797][T30475] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1287.097697][T30506] netlink: 'syz.1.6834': attribute type 1 has an invalid length. [ 1288.016976][T30532] FAULT_INJECTION: forcing a failure. [ 1288.016976][T30532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.055388][T30532] CPU: 0 PID: 30532 Comm: syz.4.6844 Not tainted syzkaller #0 [ 1288.062895][T30532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1288.072964][T30532] Call Trace: [ 1288.076247][T30532] [ 1288.079185][T30532] dump_stack_lvl+0x188/0x24e [ 1288.083895][T30532] ? show_regs_print_info+0x12/0x12 [ 1288.089208][T30532] ? load_image+0x410/0x410 [ 1288.093732][T30532] ? __lock_acquire+0x7c40/0x7c40 [ 1288.098785][T30532] should_fail_ex+0x390/0x4c0 [ 1288.103493][T30532] _copy_from_user+0x2c/0x170 [ 1288.108189][T30532] kstrtouint_from_user+0xda/0x170 [ 1288.113327][T30532] ? kstrtol_from_user+0x190/0x190 [ 1288.118478][T30532] proc_fail_nth_write+0x8b/0x200 [ 1288.123522][T30532] ? proc_fail_nth_read+0x220/0x220 [ 1288.128743][T30532] ? common_file_perm+0x171/0x1c0 [ 1288.133798][T30532] ? proc_fail_nth_read+0x220/0x220 [ 1288.139106][T30532] vfs_write+0x2dc/0x9a0 [ 1288.143378][T30532] ? file_end_write+0x250/0x250 [ 1288.148252][T30532] ? __fget_files+0x28/0x460 [ 1288.152864][T30532] ? __fget_files+0x3fc/0x460 [ 1288.157575][T30532] ? __fdget_pos+0x2ae/0x360 [ 1288.162187][T30532] ? ksys_write+0x70/0x260 [ 1288.166627][T30532] ksys_write+0x14d/0x260 [ 1288.170984][T30532] ? __ia32_sys_read+0x80/0x80 [ 1288.175773][T30532] ? lockdep_hardirqs_on+0x94/0x140 [ 1288.180993][T30532] do_syscall_64+0x4c/0xa0 [ 1288.185434][T30532] ? clear_bhb_loop+0x60/0xb0 [ 1288.190132][T30532] ? clear_bhb_loop+0x60/0xb0 [ 1288.194842][T30532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.200754][T30532] RIP: 0033:0x7f1f0c75e98e [ 1288.205184][T30532] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1288.224816][T30532] RSP: 002b:00007f1f0d6abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.233250][T30532] RAX: ffffffffffffffda RBX: 00007f1f0d6ac6c0 RCX: 00007f1f0c75e98e [ 1288.241239][T30532] RDX: 0000000000000001 RSI: 00007f1f0d6ac0a0 RDI: 0000000000000004 [ 1288.249224][T30532] RBP: 00007f1f0d6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.257212][T30532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.265197][T30532] R13: 00007f1f0ca26038 R14: 00007f1f0ca25fa0 R15: 00007ffc43b67928 [ 1288.273201][T30532] [ 1288.873700][T30559] netlink: 'syz.3.6850': attribute type 1 has an invalid length. [ 1289.555844][T30602] netlink: 'syz.0.6860': attribute type 21 has an invalid length. [ 1289.572014][T30602] netlink: 'syz.0.6860': attribute type 2 has an invalid length. [ 1289.887816][T30614] __nla_validate_parse: 3 callbacks suppressed [ 1289.887834][T30614] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1290.198952][T30622] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6864'. [ 1290.208403][T30614] netlink: zone id is out of range [ 1290.290146][T30614] netlink: zone id is out of range [ 1290.422658][T30614] netlink: zone id is out of range [ 1290.532636][T30614] netlink: zone id is out of range [ 1290.587050][T30614] netlink: zone id is out of range [ 1290.638377][T30614] netlink: zone id is out of range [ 1290.674502][T30614] netlink: zone id is out of range [ 1290.701892][T30614] netlink: zone id is out of range [ 1290.725438][T30624] netlink: 'syz.3.6865': attribute type 17 has an invalid length. [ 1290.741827][T30614] netlink: del zone limit has 4 unknown bytes [ 1290.748043][T30624] netlink: 'syz.3.6865': attribute type 16 has an invalid length. [ 1290.809730][T30624] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6865'. [ 1290.869242][T30626] device ipvlan0 entered promiscuous mode [ 1290.885930][T30627] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6865'. [ 1290.911792][T30629] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6867'. [ 1291.026840][T30631] netlink: 'syz.2.6868': attribute type 1 has an invalid length. [ 1291.079406][T30631] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6868'. [ 1291.163892][T30640] netlink: 'syz.0.6870': attribute type 29 has an invalid length. [ 1291.172575][T30640] netlink: 'syz.0.6870': attribute type 29 has an invalid length. [ 1291.180679][T30641] netlink: 'syz.0.6870': attribute type 29 has an invalid length. [ 1291.295222][T30645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6869'. [ 1291.372919][T30645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6869'. [ 1291.401479][T30645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6869'. [ 1291.444464][T30653] device syz_tun entered promiscuous mode [ 1291.518751][T30653] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1291.538025][T30645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6869'. [ 1292.371547][T30677] validate_nla: 68 callbacks suppressed [ 1292.371563][T30677] netlink: 'syz.3.6879': attribute type 10 has an invalid length. [ 1292.912994][T30700] netlink: 'syz.4.6884': attribute type 1 has an invalid length. [ 1293.314128][T30706] netlink: 'syz.0.6887': attribute type 10 has an invalid length. [ 1293.795352][T30720] netlink: 'syz.3.6890': attribute type 2 has an invalid length. [ 1294.462177][T22278] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1296.324889][T30720] device 0 entered promiscuous mode [ 1296.337542][T30723] __nla_validate_parse: 67 callbacks suppressed [ 1296.337565][T30723] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6892'. [ 1296.745368][T30758] netlink: 'syz.2.6899': attribute type 1 has an invalid length. [ 1296.803810][T30758] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6899'. [ 1296.875185][T30751] device syzkaller0 entered promiscuous mode [ 1297.058617][T30770] IPv6: NLM_F_CREATE should be specified when creating new route [ 1297.068662][T30770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1297.075948][T30770] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.083268][T30770] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.090499][T30770] IPv6: NLM_F_CREATE should be set when creating new route [ 1297.107578][T30767] netlink: 'syz.1.6902': attribute type 10 has an invalid length. [ 1297.129816][T30767] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6902'. [ 1297.174303][T30768] netlink: 'syz.1.6902': attribute type 10 has an invalid length. [ 1297.203485][T30768] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6902'. [ 1297.243871][T30772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1299.129060][T30781] netlink: 'syz.0.6907': attribute type 10 has an invalid length. [ 1299.159416][T30788] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6909'. [ 1299.383564][T30806] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6910'. [ 1299.513103][T30818] netlink: 'syz.0.6915': attribute type 1 has an invalid length. [ 1299.529180][T30818] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6915'. [ 1299.606900][T30822] netlink: 'syz.4.6916': attribute type 16 has an invalid length. [ 1299.616415][T30822] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1299.638997][T30822] netlink: 'syz.4.6916': attribute type 2 has an invalid length. [ 1299.649174][T30822] netlink: 'syz.4.6916': attribute type 1 has an invalid length. [ 1299.662215][T30822] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6916'. [ 1299.685830][T30825] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6917'. [ 1299.711888][T30825] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1299.731877][T30825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1300.234378][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.240741][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.731624][T30855] netlink: 'syz.1.6925': attribute type 27 has an invalid length. [ 1300.746480][T30855] netlink: 'syz.1.6925': attribute type 3 has an invalid length. [ 1301.079330][T30872] netlink: 'syz.0.6928': attribute type 2 has an invalid length. [ 1301.127360][T30872] device .*! entered promiscuous mode [ 1301.504360][T30881] netlink: 'syz.0.6930': attribute type 1 has an invalid length. [ 1301.531269][T30881] __nla_validate_parse: 1 callbacks suppressed [ 1301.531286][T30881] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1301.949321][T30891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6931'. [ 1302.471224][T30902] netlink: 'syz.2.6933': attribute type 19 has an invalid length. [ 1302.494418][T30902] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.6933'. [ 1302.645450][T30908] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6935'. [ 1306.221126][T30934] validate_nla: 1 callbacks suppressed [ 1306.221145][T30934] netlink: 'syz.1.6942': attribute type 1 has an invalid length. [ 1306.289194][T30934] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6942'. [ 1306.584453][T30943] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6946'. [ 1306.628772][T30939] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6945'. [ 1306.676606][T30943] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6946'. [ 1306.720179][T30945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6946'. [ 1306.823306][T30943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6946'. [ 1306.842681][T30946] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6946'. [ 1307.305754][T30969] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1307.326003][T30969] openvswitch: netlink: Flow actions attr not present in new flow. [ 1307.847826][T30984] netlink: 'syz.1.6958': attribute type 1 has an invalid length. [ 1307.893885][T30984] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6958'. [ 1309.799725][T31038] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6974'. [ 1309.872810][T31042] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6974'. [ 1309.968292][T31038] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1310.074529][T31051] netlink: 'syz.4.6976': attribute type 1 has an invalid length. [ 1310.678761][T31063] device syzkaller0 entered promiscuous mode [ 1311.758286][T31108] netlink: 'syz.4.6991': attribute type 3 has an invalid length. [ 1311.774142][T31108] __nla_validate_parse: 1 callbacks suppressed [ 1311.774159][T31108] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6991'. [ 1311.803305][T31109] netlink: 'syz.4.6991': attribute type 3 has an invalid length. [ 1311.816395][T31109] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6991'. [ 1314.086619][T31114] netlink: 'syz.0.6992': attribute type 1 has an invalid length. [ 1314.115084][T31114] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1314.255329][ T4274] Bluetooth: hci0: ISO packet for unknown connection handle 35 [ 1314.307873][T31121] device syzkaller0 entered promiscuous mode [ 1314.546106][T31131] netlink: 'syz.4.6999': attribute type 2 has an invalid length. [ 1314.574039][T31131] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6999'. [ 1315.410594][T31138] netlink: 'syz.2.7001': attribute type 1 has an invalid length. [ 1315.517868][T31138] netlink: 'syz.2.7001': attribute type 3 has an invalid length. [ 1315.586692][T31138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7001'. [ 1315.799560][T31156] delete_channel: no stack [ 1315.821695][T31156] delete_channel: no stack [ 1316.414332][T31163] netlink: 'syz.2.7007': attribute type 1 has an invalid length. [ 1316.431048][T31163] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1317.991191][T31149] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7004'. [ 1318.036393][T31149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.070169][T31149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.107341][T31149] bond0 (unregistering): Released all slaves [ 1318.709808][T31183] netlink: 'syz.3.7012': attribute type 21 has an invalid length. [ 1319.049338][T31215] netlink: 'syz.2.7017': attribute type 2 has an invalid length. [ 1319.253676][T31221] netlink: 'syz.0.7020': attribute type 1 has an invalid length. [ 1319.375094][T31223] netlink: 'syz.0.7021': attribute type 1 has an invalid length. [ 1319.386699][T31223] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7021'. [ 1319.465572][T31225] netlink: 'syz.1.7022': attribute type 21 has an invalid length. [ 1319.700321][T31236] netlink: 'syz.1.7025': attribute type 2 has an invalid length. [ 1320.801443][T31236] device 1 entered promiscuous mode [ 1322.020191][T31287] netlink: 'syz.0.7035': attribute type 1 has an invalid length. [ 1322.042758][T31287] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7035'. [ 1322.874959][T31316] netlink: 'syz.4.7040': attribute type 2 has an invalid length. [ 1322.928017][T31316] netlink: 'syz.4.7040': attribute type 4 has an invalid length. [ 1323.011791][T31316] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7040'. [ 1323.720525][T31338] device syzkaller0 entered promiscuous mode [ 1323.790073][T31344] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.7048'. [ 1324.033382][T31352] netlink: 'syz.0.7050': attribute type 3 has an invalid length. [ 1324.045154][T31352] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1324.087276][T31355] netlink: 'syz.0.7050': attribute type 3 has an invalid length. [ 1324.095211][T31355] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1324.624174][T31366] netlink: 'syz.3.7052': attribute type 1 has an invalid length. [ 1324.676123][T31366] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7052'. [ 1328.041221][T31389] netlink: 'syz.3.7058': attribute type 29 has an invalid length. [ 1328.431302][T31389] netlink: 'syz.3.7058': attribute type 29 has an invalid length. [ 1328.494838][T31398] netlink: 'syz.3.7058': attribute type 29 has an invalid length. [ 1328.920036][T31429] netlink: 'syz.1.7065': attribute type 29 has an invalid length. [ 1328.961194][T31430] netlink: 'syz.1.7065': attribute type 29 has an invalid length. [ 1328.962259][T31429] netlink: 'syz.1.7065': attribute type 29 has an invalid length. [ 1329.098977][T31441] netlink: 'syz.4.7068': attribute type 1 has an invalid length. [ 1329.132497][T31441] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7068'. [ 1329.220795][T31446] netlink: 'syz.0.7069': attribute type 3 has an invalid length. [ 1329.239692][T31446] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7069'. [ 1330.091342][T31471] netlink: 'syz.1.7077': attribute type 23 has an invalid length. [ 1330.167386][T31471] netlink: 'syz.1.7077': attribute type 27 has an invalid length. [ 1331.185575][T31485] netlink: 'syz.2.7080': attribute type 27 has an invalid length. [ 1331.213716][T31485] netlink: 'syz.2.7080': attribute type 25 has an invalid length. [ 1331.273519][T31482] device syzkaller0 entered promiscuous mode [ 1331.460593][T31495] netlink: 'syz.4.7083': attribute type 1 has an invalid length. [ 1331.484792][T31499] netlink: 'syz.1.7081': attribute type 3 has an invalid length. [ 1331.523861][T31495] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7083'. [ 1331.532546][T31499] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1331.687671][T31499] netlink: 'syz.1.7081': attribute type 3 has an invalid length. [ 1331.773144][T31499] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1331.862939][T31512] device syzkaller0 entered promiscuous mode [ 1332.131554][T31523] netlink: 'syz.1.7090': attribute type 41 has an invalid length. [ 1333.036010][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 1334.202778][T31523] netlink: 'syz.1.7090': attribute type 41 has an invalid length. [ 1334.215237][T31540] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7095'. [ 1334.476765][T31551] netlink: 'syz.2.7099': attribute type 1 has an invalid length. [ 1334.500601][T31551] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7099'. [ 1334.814050][T31566] netlink: 'syz.4.7101': attribute type 3 has an invalid length. [ 1334.902607][T31566] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1335.049606][T31560] netlink: 'syz.4.7101': attribute type 3 has an invalid length. [ 1335.063749][T31560] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1335.128400][T31564] device syzkaller0 entered promiscuous mode [ 1338.883620][T31592] netlink: 'syz.4.7110': attribute type 2 has an invalid length. [ 1338.916469][T31588] device syzkaller0 entered promiscuous mode [ 1339.339543][T31627] netlink: 'syz.2.7117': attribute type 1 has an invalid length. [ 1339.383961][T31630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1339.405351][T31627] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1339.413409][T31630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1339.462568][T31630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1339.497426][T31630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1339.522622][T31630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1339.538853][T31630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1339.647176][T31630] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1343.372053][T31680] device sit0 entered promiscuous mode [ 1345.229376][T31681] device sit0 left promiscuous mode [ 1345.260113][T31686] device sit0 entered promiscuous mode [ 1345.301706][T31691] netlink: 'syz.1.7130': attribute type 17 has an invalid length. [ 1345.334742][T31691] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7130'. [ 1345.371179][T31691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1345.696841][T31707] netlink: 'syz.2.7134': attribute type 21 has an invalid length. [ 1345.764011][T31711] netlink: 'syz.4.7135': attribute type 1 has an invalid length. [ 1345.811013][T31711] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7135'. [ 1345.909883][T31716] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7137'. [ 1345.938496][T31717] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7137'. [ 1346.135534][T31727] netlink: 'syz.3.7133': attribute type 3 has an invalid length. [ 1346.158479][T31727] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7133'. [ 1347.159733][T31774] netlink: 'syz.4.7150': attribute type 1 has an invalid length. [ 1347.167861][T31774] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7150'. [ 1347.442074][T31788] netlink: 'syz.4.7155': attribute type 2 has an invalid length. [ 1347.449990][T31788] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7155'. [ 1347.544402][T31790] netlink: 'syz.4.7156': attribute type 39 has an invalid length. [ 1348.112205][T31810] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7162'. [ 1348.124681][T31810] device hsr_slave_0 left promiscuous mode [ 1348.135710][T31810] device hsr_slave_1 left promiscuous mode [ 1348.226700][T31805] netlink: 'syz.4.7161': attribute type 1 has an invalid length. [ 1348.260465][T31805] netlink: 'syz.4.7161': attribute type 46 has an invalid length. [ 1348.322992][T31817] netlink: 'syz.2.7163': attribute type 1 has an invalid length. [ 1348.332457][T31817] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7163'. [ 1348.521859][T31825] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7166'. [ 1349.455388][T31847] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1349.605580][T31851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.612866][T31851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.669463][T31851] device bridge_slave_1 left promiscuous mode [ 1349.680346][T31851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.702653][T31851] device bridge_slave_0 left promiscuous mode [ 1349.708838][T31851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.827293][T31851] team0: Port device bridge0 removed [ 1349.881672][T31857] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1349.901340][T31857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1350.361563][T31881] validate_nla: 3 callbacks suppressed [ 1350.361599][T31881] netlink: 'syz.4.7182': attribute type 10 has an invalid length. [ 1350.677773][ T4286] Bluetooth: hci3: unexpected event 0x01 length: 151 > 1 [ 1351.150732][T31897] netlink: 'syz.4.7182': attribute type 29 has an invalid length. [ 1351.218576][T31881] team0: Device gre0 is of different type [ 1351.380817][T31885] device sit0 entered promiscuous mode [ 1351.434430][T31893] pimreg: tun_chr_ioctl cmd 1074025677 [ 1351.440062][T31893] pimreg: linktype set to 270 [ 1351.445804][T31897] netlink: 'syz.4.7182': attribute type 29 has an invalid length. [ 1351.465536][T31905] netlink: 'syz.3.7187': attribute type 21 has an invalid length. [ 1351.483323][T31905] __nla_validate_parse: 7 callbacks suppressed [ 1351.483337][T31905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7187'. [ 1351.511149][T31904] netlink: 'syz.3.7187': attribute type 21 has an invalid length. [ 1351.519053][T31904] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7187'. [ 1351.727306][T31916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7189'. [ 1351.877676][T31924] netlink: 'syz.4.7191': attribute type 1 has an invalid length. [ 1351.885768][T31924] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7191'. [ 1352.264167][T31932] device wg2 entered promiscuous mode [ 1352.711948][T31942] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1352.903619][T31953] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7198'. [ 1353.508730][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 1353.718428][T31968] netlink: 'syz.4.7204': attribute type 1 has an invalid length. [ 1353.728384][T31968] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7204'. [ 1354.571638][T32017] device batadv0 entered promiscuous mode [ 1354.591408][T32017] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7225'. [ 1354.621559][T32017] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1354.642305][T32017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1355.235674][T32040] netlink: 'syz.4.7220': attribute type 1 has an invalid length. [ 1355.276400][T32040] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7220'. [ 1355.745480][T32062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7227'. [ 1356.448121][T32089] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1356.522776][T32089] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7234'. [ 1356.656826][T32093] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.7237'. [ 1356.764111][T32096] device syzkaller0 entered promiscuous mode [ 1359.235918][T32131] device wlan1 entered promiscuous mode [ 1359.379050][T32135] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.7244'. [ 1361.679507][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.691412][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1386.021552][ T4322] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2651 jiffies s: 211129 root: 0x2/. [ 1386.050885][ T4322] rcu: blocking rcu_node structures (internal RCU debug): [ 1386.058058][ T4322] Sending NMI from CPU 0 to CPUs 1: [ 1386.063325][ C1] NMI backtrace for cpu 1 [ 1386.063335][ C1] CPU: 1 PID: 32137 Comm: syz.0.7247 Not tainted syzkaller #0 [ 1386.063351][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1386.063359][ C1] RIP: 0010:__sysvec_irq_work+0x9b/0x350 [ 1386.063479][ C1] Code: 0f 85 af 00 00 00 3b 1d 63 11 f3 0c 0f 83 90 00 00 00 41 89 df c1 eb 06 48 8d 3c dd a8 16 21 8e be 08 00 00 00 e8 f5 78 a5 00 <4c> 0f a3 3d 35 0f f3 0c 73 09 e8 76 31 3e 00 84 c0 74 70 65 ff 05 [ 1386.063491][ C1] RSP: 0018:ffffc900001e0b60 EFLAGS: 00000056 [ 1386.063504][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff812e076b [ 1386.063515][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e2116a8 [ 1386.063525][ C1] RBP: 0000000000000000 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 1386.063535][ C1] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: 0000000000000000 [ 1386.063545][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000001 [ 1386.063555][ C1] FS: 00007f89ccb846c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1386.063568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1386.063578][ C1] CR2: 0000200000000040 CR3: 000000005e6a5000 CR4: 00000000003506e0 [ 1386.063592][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1386.063601][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1386.063610][ C1] Call Trace: [ 1386.063616][ C1] [ 1386.063624][ C1] sysvec_irq_work+0x4a/0xc0 [ 1386.063640][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1386.063659][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1386.063676][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 6c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1386.063686][ C1] RSP: 0018:ffffc900001e0c40 EFLAGS: 00000206 [ 1386.063698][ C1] RAX: 08ab27bc275f0300 RBX: 1ffff9200003c190 RCX: 08ab27bc275f0300 [ 1386.063709][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420 [ 1386.063720][ C1] RBP: ffffc900001e0d30 R08: ffff8880b8f357cb R09: 1ffff110171e6af9 [ 1386.063730][ C1] R10: dffffc0000000000 R11: ffffed10171e6afa R12: 0000000000000246 [ 1386.063741][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 1386.063762][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1386.063783][ C1] __rcu_read_unlock+0x78/0xd0 [ 1386.063797][ C1] rebalance_domains+0x86f/0x9d0 [ 1386.063829][ C1] ? rebalance_domains+0x12b/0x9d0 [ 1386.063850][ C1] handle_softirqs+0x291/0x910 [ 1386.063894][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1386.063909][ C1] ? do_softirq+0x210/0x210 [ 1386.063921][ C1] ? hrtimer_interrupt+0x775/0x980 [ 1386.063941][ C1] __irq_exit_rcu+0x13b/0x230 [ 1386.063954][ C1] ? irq_exit_rcu+0x20/0x20 [ 1386.063972][ C1] irq_exit_rcu+0x5/0x20 [ 1386.063984][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1386.064000][ C1] [ 1386.064004][ C1] [ 1386.064009][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1386.064028][ C1] RIP: 0010:lock_release+0x5ab/0x920 [ 1386.064046][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 1386.064057][ C1] RSP: 0018:ffffc9000c647420 EFLAGS: 00000206 [ 1386.064069][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: 08ab27bc275f0300 [ 1386.064079][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf6420 [ 1386.064089][ C1] RBP: ffffc9000c647528 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 1386.064099][ C1] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: ffff8880287628e0 [ 1386.064110][ C1] R13: dffffc0000000000 R14: ffff8880287628d0 R15: 1ffff920018c8e90 [ 1386.064131][ C1] ? page_ext_put+0x98/0xb0 [ 1386.064175][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 1386.064193][ C1] ? __set_page_owner_handle+0x37b/0x3c0 [ 1386.064213][ C1] post_alloc_hook+0x173/0x1a0 [ 1386.064232][ C1] get_page_from_freelist+0x206b/0x2180 [ 1386.064254][ C1] ? __alloc_pages+0x130/0x4f0 [ 1386.064287][ C1] __alloc_pages+0x1ec/0x4f0 [ 1386.064310][ C1] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 1386.064326][ C1] ? zone_statistics+0x170/0x170 [ 1386.064346][ C1] ? __rwlock_init+0x140/0x140 [ 1386.064360][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1386.064375][ C1] __get_free_pages+0x8/0x30 [ 1386.064393][ C1] kasan_populate_vmalloc_pte+0x31/0xf0 [ 1386.064407][ C1] ? __apply_to_page_range+0x97b/0xd10 [ 1386.064421][ C1] __apply_to_page_range+0x98d/0xd10 [ 1386.064438][ C1] ? kasan_populate_vmalloc+0x70/0x70 [ 1386.064455][ C1] alloc_vmap_area+0x179f/0x18d0 [ 1386.064480][ C1] ? vm_map_ram+0xab0/0xab0 [ 1386.064496][ C1] ? rcu_is_watching+0x11/0xa0 [ 1386.064518][ C1] __get_vm_area_node+0x158/0x330 [ 1386.064537][ C1] __vmalloc_node_range+0x357/0x1380 [ 1386.064554][ C1] ? reuseport_array_alloc+0xbe/0x160 [ 1386.064579][ C1] ? end_current_label_crit_section+0x170/0x170 [ 1386.064602][ C1] ? free_vm_area+0x50/0x50 [ 1386.064620][ C1] ? bpf_lsm_capable+0x5/0x10 [ 1386.064635][ C1] ? security_capable+0x85/0xb0 [ 1386.064656][ C1] bpf_map_area_alloc+0xd4/0xe0 [ 1386.064672][ C1] ? reuseport_array_alloc+0xbe/0x160 [ 1386.064687][ C1] reuseport_array_alloc+0xbe/0x160 [ 1386.064704][ C1] map_create+0x524/0xff0 [ 1386.064722][ C1] ? security_bpf+0x7a/0xa0 [ 1386.064741][ C1] __sys_bpf+0x38b/0x780 [ 1386.064758][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1386.064778][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1386.064803][ C1] ? lock_chain_count+0x20/0x20 [ 1386.064824][ C1] __x64_sys_bpf+0x78/0x90 [ 1386.064841][ C1] do_syscall_64+0x4c/0xa0 [ 1386.064859][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1386.064877][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1386.064895][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.064913][ C1] RIP: 0033:0x7f89cbd9e159 [ 1386.064926][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.064937][ C1] RSP: 002b:00007f89ccb84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1386.064951][ C1] RAX: ffffffffffffffda RBX: 00007f89cc025fa0 RCX: 00007f89cbd9e159 [ 1386.064962][ C1] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 1386.064971][ C1] RBP: 00007f89cbe35024 R08: 0000000000000000 R09: 0000000000000000 [ 1386.064980][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.064988][ C1] R13: 00007f89cc026038 R14: 00007f89cc025fa0 R15: 00007fffb57d7968 [ 1386.065005][ C1]