last executing test programs: 3.811015186s ago: executing program 0 (id=8340): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRESOCT, @ANYBLOB="000000000000000000000085ef00a671e7d4d040130600", @ANYRES32=0x0, @ANYRES16=r2, @ANYRES8=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000900)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="fb170fa7580000009a1faf27725b583000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000185a0000100000000000000000000000634d01000000000018000000faffffff000000000200000085200000040000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, &(0x7f0000000500)=[r5], 0x0, 0x10, 0xd}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000cc0)={@ifindex, r7, 0x16, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32, @ANYBLOB="0100008000000000000000feffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x80, 0x0, 0x0, 0x8c79b8d8a15b1d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0xa}, 0x10c002, 0xac5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x5a2584770f1970f4, 0x7, 0x0, 0x4, 0x4, 0x3fffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000700)={r7}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xcba}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) 3.331757178s ago: executing program 4 (id=8343): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000200)="2ee9e3fe942f622eb6ad6f868ef181b541367c61aa66696ae28e5416a74567d054f1760aa33c1e9ffad30d86027e52583779d8ceb54f57b509e306022a947631ed"}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000008c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x21}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.897282258s ago: executing program 2 (id=8344): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext, 0x10c002, 0xffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461", 0x40}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800001e00000000081800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000100)="a57e7399a3186508b5d0d4f5b2370b4bd6886fc12b905fb222c1c34ada17af5e43af17abd7205815e9", &(0x7f0000000200)=""/128}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000780)}}, 0xffffffffffffff26) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x9, 0x5}]}, @float={0x9, 0x0, 0x0, 0x10, 0x6}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000980)=""/60, 0x5f, 0x3c, 0x1, 0x2, 0x10000}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x28, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000010000001507320101000000181b0000", @ANYRES32=r3, @ANYBLOB="000000000000000006180500ab00000018230000", @ANYRES32=r3, @ANYBLOB="000000000500000018120000", @ANYRES32=r3, @ANYBLOB="00000000000000850000000c000000b700000000000000181200"/36, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008417f8ff0800000018410000070000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0xff, &(0x7f0000000c80)=""/255, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x4, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000e00)=[{0x0, 0x5, 0xa}, {0x3, 0x3, 0x6, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x16, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @alu={0x4, 0x1, 0x4, 0x6, 0x9, 0x30}, @exit, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}]}, &(0x7f0000000580)='syzkaller\x00', 0x200, 0x8, &(0x7f00000005c0)=""/8, 0x41000, 0x49, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x9, 0x1, 0xc}, 0x10, 0x19fa5, r8, 0x0, 0x0, 0x0, 0x10, 0xff1e}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x85, &(0x7f0000000000), 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xffffff36, 0x3, 0x12000000, 0x2001, r2, 0x1, '\x00', r6, r10, 0x4, 0x5, 0x0, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.857993874s ago: executing program 0 (id=8345): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000021000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb6e, 0x8}, 0x420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/\a/\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 1.823849195s ago: executing program 2 (id=8346): socket$kcm(0x10, 0x5, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x24004000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) ioctl$TUNSETFILTEREBPF(r0, 0xb702, 0x0) 1.823029585s ago: executing program 3 (id=8347): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x6800, &(0x7f0000000240)="25b1a674e007a2eb24770d1d35c8506763fcc53f2e", 0x15, &(0x7f00000003c0), &(0x7f00000006c0), &(0x7f0000000700)="87093f7fbde586905558dffde11e9b891d0569343199e1b93f46fb1c45becccc7e0aa465e7dc73454b110eeec45509ad06525936bcc53e7a1c594e53fc901b91aa95f9aa98201a77cae2b13c600b457d958a3ba86e7f255d4cadd9f351797346e293b94b46f81f6dffa3690a8bf69aed59366d387a865b6e27d66d08b6bfbd5b255334925c32d17154b7e3d8914afc1eaaa7362026dc") (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x3) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000}, 0x48) (async) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="dc9d69a291a9b673e5e1bcf2e99aaf46103e999543fb4975896bb0f0b9047e3e6169fea67c6c6fe96528480a13795c07c7e6cd2401e310f3f8f4afaea2778049f22817636ca7dacde2447cabf5ed7ce491051cfac1f2c36611a293ed2c2b4e6bce3d7cc1ccde1cd86ccc1de77df319ee7c8f", 0x72}, {&(0x7f0000000280)="a147cfee59816914bd0b1c16e0cd66a1a331388afd13670191aa8e548642394db7c819e2fe5b384d0bae4a53e5bc57c35296343724bef298af8781df719dc2eb66c766ae6adead5c0ad5eedb5bd601ce", 0x50}, {0x0}, {&(0x7f0000000400)="3b6a1e4ad1919b708b61b195d18ca2", 0xf}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20, 0xc840}, 0x2000) (async) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x22, 0x2, 0x21) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000580)={0x1, 0x80, 0x2, 0x81, 0x5, 0xe, 0x0, 0x1, 0x82000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff7fff, 0x1, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x1000, 0x4, 0xa, 0x9, 0x10001, 0x6, 0x59e, 0x0, 0xde30, 0x0, 0x68d}) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a80)="d80000001c0081204e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fae006dcdf63951f215ce3bb9ad8e0bcd1f1f4c052207548099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a9295", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.822768145s ago: executing program 4 (id=8348): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="71100ef76b19f10d68ccd8620ded9ca315832e1e62ce445dcd413dc20e99918debc5f2cf7ffc85d761e5f065ea795e77da371176bbc9df32915c0690e176fedeb548f9828cf3189d24a7789455ff9e6ed4edab976c56f3944029a8bd1be0eaa53f979ec9", @ANYRES64=0x0], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061dbfeb3bfd8196800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0xf) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)={0x100}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x109511, 0x0, 0x0, 0x3, 0x1, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=r5, 0x4) write$cgroup_subtree(r5, &(0x7f0000000100)={[{0x2d, 'freezer'}, {0x2d, 'cpuacct'}, {0x2d, 'net_prio'}, {0x2b, 'rdma'}, {0x2d, 'devices'}, {0x2b, 'net_cls'}, {0x2d, 'io'}, {0x2d, 'pids'}]}, 0x3e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 1.665374789s ago: executing program 1 (id=8349): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100ffff0000000000000000850000000700000085000000d000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x46, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f00000001c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\t\x00\x00\x00\v\x00\x00\x00'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff, 0x2a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x46, &(0x7f0000000040), 0x4) 1.59743653s ago: executing program 3 (id=8350): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.499494423s ago: executing program 0 (id=8351): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x106) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2e"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x30}]}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, &(0x7f0000000000)=r6, 0xc) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x220}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.445776684s ago: executing program 1 (id=8352): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10, 0xfff, 0xc2ba, 0x0, 0x4000000, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYRES64], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex=r6, r3, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="5e75572d7ed42b5565594fc4ddc67421f795361fc054c9d280", 0x19}], 0x1}, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/225, 0xe1}], 0x1}, 0x2142) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400f9ffffff00009007000000010000060400000000000001000000000061000000002e85b1bc909d89ec6dc8b876ff0f4159ddbaf9fc94825d0000f4842f9e36006adc3d56b68bb4140f962143e1b769198da96854e71aca75d48ba1f29852fcabaf684c9c5207d669b06365c7a4b9296df3ea2aa046ee09c882a581004dc56be5aace36cc8ae9da55d8a2f694763fc95595a44a022f4a616d32f99a2d644641d91d25d9936423859bda9ba92d95357edc35b94201963af3d96c6b4d66f3555a6aa99ed1588872d8778b21"], 0x0, 0x36}, 0x28) r7 = socket$kcm(0x10, 0x3, 0x10) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000008510000018"], 0x0}, 0x90) socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000240)="ce010000009a697f6536", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 1.445198974s ago: executing program 3 (id=8353): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000011000000000000000000000850000007d000000b7080000000000007baaf8ff00000000b5080000098000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000fea321e3b800cf1ae29e2fde15168a07152dade4d95280b90873dc9ebd919ec0be4371bc89829f6850656a0cb09898063e43f8b60b82d6685e35752b76b248b2d2f08b66551bc9f112d8b979a7c3b4acab9f10e0b4acc0daccd408ef43a7b37baee699558ee20f5d310eaefbd568e7ab869b39bb295ae9"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="95e5d9589170cab776c29248d6cd30d51cb94a2ead3ec255f2b4bb957d6d48002851c0fa6ccf64bafbdda9bab0d7d2c19ff8123fed77d899c0baeb897eb4529f1ccc9a3e96e3981627f0a4e7c88be2", 0x4f}], 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ffffffff000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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"], 0x120}, 0x24044c00) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) socket$kcm(0x2, 0x200000000000006, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007a8cb2684fc60c83c925b303615f7f314e65f902c2d02546bdba374342ee86de482aa3c47473ae9ebc69e29ca145c5b06de3742e040029cbd2973417c0c89d5efd8a9bcb675b74a1060f31c75eaa4890cbed97c8e9d25ddf383eea89be197a27dfc2430f8a4c3ca2b58ad9ca0a7cc4bdeb49805d8ef80979251e0f4b5486c66020fc53c1b442ca25e587ca770ebe2ebdf930b1832870c2a51810db18f8e4d7d0509eb92a2ffef729e5f3170363fd0289ba1d9316e6be349d6521dbc13d8adc281c8270d9e281d731cc39edf3b8b1765f81896612553b36cf24", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000000000000000000000000001d000000000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000640)=0x175) 1.361490596s ago: executing program 4 (id=8354): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x20040004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.178014791s ago: executing program 3 (id=8355): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x85}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)}, 0x4000001) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x4004010) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socket$kcm(0xf, 0x3, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x2) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 1.172283091s ago: executing program 0 (id=8356): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='\x00', 0x1}], 0x1}, 0x80d1) r5 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x385c, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x673}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r9, 0x4008744b, 0xf0ff1f00000000) 1.113551882s ago: executing program 1 (id=8357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="c30000001c0081044e81f782db64b904070000000e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803606f1dd7ee0cfab94f94007134cf6ee08000a0e408e8ddef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe749fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece2b42a9ecbee5de6ccd40dd69a", 0xc3}], 0x1, 0x0, 0x0, 0x7400}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000400000000000000aaaaaaaaaaaa9a00"/28]) 1.110421653s ago: executing program 4 (id=8358): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'cpuacct'}, {0x2b, 'memory'}, {0x2d, 'freezer'}, {0x2d, 'cpu'}, {0x2b, 'perf_event'}, {0x2d, 'hugetlb'}, {0x34, 'cpuacct'}]}, 0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r1, 0x5, 0x1, 0x1ff, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0)={r3}, 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000600)=r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x420400, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000680)=0xc0000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000740)=r5) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xea, 0xea, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x9}}, @var={0x4, 0x0, 0x0, 0xe, 0x2, 0x2}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x7, 0x6}, @datasec={0xe, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x10000, 0xf32}, {0x2, 0x5, 0x1}], '=^'}, @fwd={0x9}, @enum={0x6, 0xa, 0x0, 0x6, 0x4, [{0x8, 0x2}, {0x1, 0x7fffffff}, {0xc, 0x7f}, {0x1, 0x5}, {0x1, 0xffffff80}, {0x0, 0x100}, {0xc, 0x1}, {0xe, 0x13a4}, {0xe, 0x2}, {0x8}]}, @fwd={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7}}]}, {0x0, [0x0, 0x30, 0x30, 0x5f, 0x61]}}, &(0x7f00000008c0)=""/108, 0x10b, 0x6c, 0x1, 0x42cc}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xd, '\x00', r4, r7, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r5, 0x0, 0x1000, 0xf2, &(0x7f0000000a00)="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", &(0x7f0000001a00)=""/242, 0xa, 0x0, 0x61, 0x6f, &(0x7f0000001b00)="98c2351992fb56e5ee653ecb1ee831692af9101a72c7f69211336b705aa43555bd5d10a4e4d7dabc9c04623cc95b2f3cb52ee043141839fc270be6df1d18e054c7868564314b91bd5e24062bfadf4d7ab742f17262ca0f7bfb08a1d0e43d35a1ef", &(0x7f0000001b80)="88c3e23889e41cbb55f61bd724750f68692b17e784f5b2eaf3304efb966cfd837b3f146c5a5e35ad96ed6b01b6d7df331ae1fca48cf9f902b901405d3c2c949a013efe94d8d667dabfdb284f208105fed2530f48610c4f6d7f7aef16013dccf1c8dfb4ef768fc29b8528fb3faa70f6", 0x1, 0x0, 0x4e90}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001c80)=r5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000002040)={&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/227, 0xe3}, {&(0x7f0000001e80)=""/103, 0x67}], 0x2, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40) write$cgroup_subtree(r0, &(0x7f0000002080)={[{0x2b, 'memory'}]}, 0x8) sendmsg$sock(r10, &(0x7f00000022c0)={&(0x7f00000020c0)=@caif=@rfm={0x25, 0x3, "c6fdb12d0959a0276ae875697886c2d8"}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)="e6a2764a0e0507f2a96fd38d63dba5f1b608a23a6a893bc93ee6092842cc3e5ab11fe1f26ea06f1d9786a53446980b692aba5742980dcf19a347acad4a284f73ed021e69250309f31c8f", 0x4a}, {&(0x7f00000021c0)="ee96042798c11f4bce233742fae95c787933a8313c36527683fd2e922af4bbda9b6d633f00934365c3", 0x29}], 0x2, &(0x7f0000002240)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002380)={{r16, 0xffffffffffffffff}, &(0x7f0000002300), &(0x7f0000002340)='%pK \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000027c0)={r11, 0xe0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f00000025c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002600), &(0x7f0000002640), 0x8, 0xba, 0x8, 0x8, &(0x7f0000002680)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002880)={{r13, 0xffffffffffffffff}, &(0x7f0000002800), &(0x7f0000002840)=r15}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0xa, 0x8, &(0x7f00000023c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r15, 0x0, 0x0, 0x0, 0xffffffff}, @alu={0x7, 0x1, 0x7, 0x5, 0x4, 0x8}, @exit, @map_fd={0x18, 0xa, 0x1, 0x0, r18}], &(0x7f0000002400)='syzkaller\x00', 0x57, 0x57, &(0x7f0000002440)=""/87, 0x41100, 0x40, '\x00', r4, @fallback=0x29, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f00000024c0)={0x1, 0x10, 0x4, 0x6}, 0x10, r19, r12, 0x3, &(0x7f00000028c0)=[r20, 0xffffffffffffffff], &(0x7f0000002900)=[{0x1, 0x1, 0x5, 0x5}, {0x4, 0x3, 0x3, 0x7}, {0x2, 0x1, 0xb}], 0x10, 0x8001}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002a40)=@generic={&(0x7f0000002a00)='./file0\x00'}, 0x18) r21 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) ioctl$TUNSETIFF(r21, 0x400454ca, &(0x7f0000002ac0)={'syzkaller0\x00', 0x10}) ioctl$TUNSETNOCSUM(r12, 0x400454c8, 0x8) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000002b00)) recvmsg$kcm(r17, &(0x7f0000003080)={&(0x7f0000002b40)=@nfc, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002bc0)=""/190, 0xbe}, {&(0x7f0000002c80)=""/11, 0xb}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/154, 0x9a}, {&(0x7f0000002dc0)=""/117, 0x75}, {&(0x7f0000002e40)=""/158, 0x9e}, {&(0x7f0000002f00)=""/79, 0x4f}], 0x7, &(0x7f0000003000)=""/83, 0x53}, 0x40) 918.395327ms ago: executing program 4 (id=8359): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2f86, 0x7}, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2f86, 0x7}, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2a, 0x2, 0x0) (async) socket$kcm(0x2a, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) (async) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0x12) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) (async) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETLINK(r4, 0x400454cd, 0x305) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0xf60, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 833.370129ms ago: executing program 1 (id=8360): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x100, 0x4}, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r5 = syz_clone(0x84021000, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000001940)) perf_event_open(0x0, r5, 0x8, r4, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80014, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007d, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x4, 0x7, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0), 0x18}, 0x10001) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000808100000081"], 0x48) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 743.216451ms ago: executing program 3 (id=8361): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000021000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb6e, 0x8}, 0x420}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/\a/\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 742.613311ms ago: executing program 2 (id=8362): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000100ffff0000000000000000850000000700000085000000d000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0x46, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f00000001c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\t\x00\x00\x00\v\x00\x00\x00'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff, 0x2a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x46, &(0x7f0000000040), 0x4) 517.481467ms ago: executing program 0 (id=8363): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006bd6010000d86e6c1d0002117ea60809000af32c6e020075f800250002000f00000017d34405251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 498.517657ms ago: executing program 2 (id=8364): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x8d4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 466.100278ms ago: executing program 1 (id=8365): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x11, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000011000000000000000000000850000007d000000b7080000000000007baaf8ff00000000b5080000098000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000fea321e3b800cf1ae29e2fde15168a07152dade4d95280b90873dc9ebd919ec0be4371bc89829f6850656a0cb09898063e43f8b60b82d6685e35752b76b248b2d2f08b66551bc9f112d8b979a7c3b4acab9f10e0b4acc0daccd408ef43a7b37baee699558ee20f5d310eaefbd568e7ab869b39bb295ae9"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="95e5d9589170cab776c29248d6cd30d51cb94a2ead3ec255f2b4bb957d6d48002851c0fa6ccf64bafbdda9bab0d7d2c19ff8123fed77d899c0baeb897eb4529f1ccc9a3e96e3981627f0a4e7c88be2", 0x4f}], 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ffffffff000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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"], 0x120}, 0x24044c00) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) socket$kcm(0x2, 0x200000000000006, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007a8cb2684fc60c83c925b303615f7f314e65f902c2d02546bdba374342ee86de482aa3c47473ae9ebc69e29ca145c5b06de3742e040029cbd2973417c0c89d5efd8a9bcb675b74a1060f31c75eaa4890cbed97c8e9d25ddf383eea89be197a27dfc2430f8a4c3ca2b58ad9ca0a7cc4bdeb49805d8ef80979251e0f4b5486c66020fc53c1b442ca25e587ca770ebe2ebdf930b1832870c2a51810db18f8e4d7d0509eb92a2ffef729e5f3170363fd0289ba1d9316e6be349d6521dbc13d8adc281c8270d9e281d731cc39edf3b8b1765f81896612553b36cf24", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="0000000000000000000000000000000000000000001d000000000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000640)=0x175) 333.155482ms ago: executing program 0 (id=8366): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0xffd3) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0xfffffffffffffed1, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x0, 0x6f, 0x0, &(0x7f0000000140)=""/111, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x2, 0x8000}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x20020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5c, 0x0, 0x5, 0x0, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x9, 0x0, 0x0) perf_event_open$cgroup(0x0, r2, 0x10, 0xffffffffffffffff, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000001300)=""/160, 0x35, 0xa0, 0x1}, 0x28) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24010000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110080, 0xac5d, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r10) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x20, 0x1, 0x6, 0xffdff036}, {0x6, 0x0, 0x0, 0x8ab3}, {0x91b, 0x6, 0xb, 0xfffffff7}]}) 328.894262ms ago: executing program 2 (id=8367): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="00000000000000469e93147252674c00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0xd7, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000040000000000000000000085000000750000009500000000000000671d5f6fe88f239e740aa998411bdbe43109d0999cacb17b53ca22fd7b3d067f337664c78639458a4525a9be2b8b2d623f48acab040d437e109d90"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) close(r4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0x7, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x80800, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x6) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYBLOB="3ec2", @ANYRES16=r6], 0x9a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000377a0007000000000000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf7fffffd}, 0x0, 0x10, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000003, 0x300) 257.345973ms ago: executing program 4 (id=8368): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x13, 0x21, &(0x7f0000002400)=ANY=[], 0x0, 0x5, 0xbf, &(0x7f0000001300)=""/191, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x3, 0xc, 0x5, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={r5, 0x58, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x11, &(0x7f0000000000)=r11, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0x5, '\x00', r8, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) sendmsg$inet(r9, &(0x7f0000000cc0)={&(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000b40)="e99bffcbaee5b529d86174296ff0adbe3cf67a0ad1a733277fa9efee4b9b7e2fa4deeb36ce60cf46c7bf36b11f458f69195573c09bbb46acb29300f70c257cf10c1f825c73059ef238e551c77b3ee13e48e76973e3a8e9869780b07fc99e5157216e012e8a4b91ba983efee33fc277f03a326b1effffb9c13525871de55592079c807f3f836dcad881e9960c751e126b448644b692fc34770e2ebaa175eb02671ad751d47c", 0xa5}, {&(0x7f0000000c00)="2f5597b4dd04d64941380974b3fbeae0d461d528922197d1abc5b19569c434a0b27b8b1a2e1f6427513c56c00de5b96b4e2277eb87b4", 0x36}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010101}}}], 0x20}, 0x48005) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003140)={0xffffffffffffffff, 0x82}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003200)={{r2, 0xffffffffffffffff}, &(0x7f0000003180), &(0x7f00000031c0)=r3}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x15, 0xb, 0xdd6, 0x3, 0x40080, r4, 0x1d, '\x00', r8, r11, 0x3, 0x5, 0x3}, 0x50) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpu.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x16, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1d93}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@map_fd={0x18, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x7}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x12, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x7a72}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0xf, 0x1ff, 0x69b1}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a00)=[{0x0, 0x2, 0x10, 0xb}, {0x4, 0x4, 0xc, 0x7}, {0x5, 0x2, 0x10, 0x7}, {0x0, 0x5, 0x10, 0x5}, {0x3, 0x3, 0xe, 0x1}, {0x3, 0x4, 0x5, 0x2}], 0x10, 0x1}, 0x94) write$cgroup_type(r14, &(0x7f0000000180), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40305829, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003300)={0x6, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x6, 0x2, 0x0, r4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xc, 0x0, 0x3, 0xfffffffffffffff0, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f00000005c0)='GPL\x00', 0xc, 0x1000, &(0x7f0000002100)=""/4096, 0x41100, 0x4, '\x00', r8, 0x25, r11, 0x8, &(0x7f0000003100)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000003240)=[r2, r12, r2, r2, r2, r2, r2, r2, r13], &(0x7f0000003280)=[{0x5, 0x3, 0x1, 0xc}, {0x1, 0x5, 0x7, 0xa}, {0x5, 0x4, 0x2}, {0x5, 0x4, 0x5, 0xc}, {0x2, 0x1, 0x2, 0xa}], 0x10, 0x8}, 0x94) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1e, &(0x7f0000000dc0)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @ldst={0x3, 0x3, 0x6, 0x8, 0x9, 0x1, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf6d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @jmp={0x5, 0x0, 0x1, 0x4, 0xb, 0x3c, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 257.104243ms ago: executing program 3 (id=8369): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x2f}, 0x48) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x20040004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 148.209686ms ago: executing program 1 (id=8370): r0 = perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0x1}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0x1}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080c0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) (async) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=8371): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0xc800, 0x40, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3ee901"], 0x9a) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x5, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x2e, 0xfffffffffffffe86, &(0x7f0000000280)="a825841255169fc2315136e6df8ff7d0dbaaa3f76120feead8a815c7e21d69b6748b4c66478b4a49d9d94b781985", &(0x7f0000000140), 0x8, 0x0, 0x21, 0xfffffedb, &(0x7f0000000240)="bf9f913c6510d59de8d1f9fe763827d6941d3813f0f24575bc629b1a0c4cf7d2b3", &(0x7f0000001640)="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", 0x41f4f262567f7dd4, 0x0, 0x7fffffff}, 0x50) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x1}, 0x40000000) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) kernel console output (not intermixed with test programs): tlink: 1 bytes leftover after parsing attributes in process `syz.1.6324'. [ 1305.895738][T27602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.127371][T27802] device syzkaller0 entered promiscuous mode [ 1307.520828][T23080] Bluetooth: hci2: command 0x0406 tx timeout [ 1310.239060][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1310.248418][T24800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1310.259950][T27602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.350142][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1310.384050][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1310.427741][T20311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.435092][T20311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1310.489011][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1310.520706][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1310.578336][T20311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.585613][T20311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.636431][T23080] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1310.644144][T23080] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1310.656918][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1310.676768][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1310.685796][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1310.697867][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1310.713495][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1310.732427][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1310.741598][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1310.751522][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1310.761044][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1310.771971][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1310.785794][T27602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1310.808491][T27602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1310.829052][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1310.839059][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1311.215892][T27870] IPv6: NLM_F_CREATE should be specified when creating new route [ 1311.283443][T27870] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6339'. [ 1312.177555][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1312.211970][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1312.293531][T27602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.376269][T24821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1312.434494][T24821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1312.571558][T27906] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6347'. [ 1312.623617][T27602] device veth0_vlan entered promiscuous mode [ 1312.664329][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1312.674913][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1312.710838][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1312.739482][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1312.794531][T27602] device veth1_vlan entered promiscuous mode [ 1312.910999][T23080] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1312.918528][T23080] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1312.928654][T27602] device veth0_macvtap entered promiscuous mode [ 1312.999928][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1313.010386][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1313.049980][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1313.160320][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1313.181445][T27602] device veth1_macvtap entered promiscuous mode [ 1313.211406][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1313.230706][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1313.319844][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.392820][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.458327][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.520004][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.557217][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.612690][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.639691][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1313.672840][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1313.731558][T27602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.820124][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1313.860689][T24710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1313.882296][T27928] netlink: 'syz.3.6351': attribute type 10 has an invalid length. [ 1313.901779][T27928] netlink: 'syz.3.6351': attribute type 19 has an invalid length. [ 1313.928030][T27928] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1313.948638][T27929] netlink: 'syz.3.6351': attribute type 10 has an invalid length. [ 1313.980636][T27929] netlink: 'syz.3.6351': attribute type 19 has an invalid length. [ 1313.998010][T27929] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1314.053685][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.080213][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.127801][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.241552][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.313458][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.339888][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.359721][T27602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1314.377849][T27602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.418759][T27602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1314.446603][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1314.503967][T20311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1314.560799][T27602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.716821][T27602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.776699][T27602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.868139][T27602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.375862][T24808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.407665][T24808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.447922][T24808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1315.517036][T27960] IPv6: NLM_F_CREATE should be specified when creating new route [ 1315.560026][T27960] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1315.626549][T20311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.646599][T20311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.701493][T24810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1315.765893][T23080] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1315.773878][T23080] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1318.199213][T27996] netlink: 'syz.4.6365': attribute type 5 has an invalid length. [ 1318.331163][T27996] netlink: 'syz.4.6365': attribute type 30 has an invalid length. [ 1322.116951][T28022] netlink: 'syz.1.6372': attribute type 7 has an invalid length. [ 1322.171541][T28027] IPv6: Can't replace route, no match found [ 1322.224406][T28027] netlink: 'syz.4.6374': attribute type 6 has an invalid length. [ 1322.257089][T28027] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.6374'. [ 1322.662447][T28040] device syzkaller0 entered promiscuous mode [ 1324.159448][T28059] netlink: 'syz.0.6381': attribute type 1 has an invalid length. [ 1324.458482][T28059] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6381'. [ 1324.740269][T28061] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 1325.756331][T24782] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1325.788541][T28061] netlink: 'syz.0.6381': attribute type 29 has an invalid length. [ 1326.369038][T23080] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1326.606361][T28081] netlink: 'syz.1.6387': attribute type 2 has an invalid length. [ 1326.753563][T28081] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1327.825202][T28088] netlink: 'syz.3.6388': attribute type 10 has an invalid length. [ 1327.847206][T28088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.877899][T28088] device bridge_slave_1 left promiscuous mode [ 1327.890635][T28088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.926218][T28088] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1328.266290][T28110] netlink: 'syz.1.6396': attribute type 21 has an invalid length. [ 1328.435330][T28110] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1329.359866][T23080] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1330.322535][T28127] netlink: 'syz.1.6400': attribute type 29 has an invalid length. [ 1330.348740][T28127] netlink: 'syz.1.6400': attribute type 29 has an invalid length. [ 1330.369274][T28127] netlink: 'syz.1.6400': attribute type 29 has an invalid length. [ 1330.678369][T28148] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6406'. [ 1330.697802][T28127] can: request_module (can-proto-0) failed. [ 1330.986153][T28155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6407'. [ 1331.676112][T28166] netlink: 'syz.1.6411': attribute type 10 has an invalid length. [ 1331.787113][T28166] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1332.145038][T23080] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 1332.152787][T23080] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 1334.812844][T28198] netlink: 'syz.0.6421': attribute type 9 has an invalid length. [ 1334.878658][T28198] netlink: 668 bytes leftover after parsing attributes in process `syz.0.6421'. [ 1334.983597][T28207] netlink: 'syz.4.6423': attribute type 3 has an invalid length. [ 1335.009748][T28207] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1337.579667][T23080] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1337.587206][T23080] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1340.846402][T28273] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6438'. [ 1341.653261][T28285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1341.778422][T28285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6442'. [ 1342.930411][T23080] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1342.938003][T23080] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1343.322763][T28310] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1343.345359][T28310] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1343.361379][T28310] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1344.469050][T28333] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6453'. [ 1346.263182][T23080] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1346.270894][T23080] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1348.484672][T23080] Bluetooth: hci4: command 0x0406 tx timeout [ 1350.682853][T28382] netlink: 'syz.2.6467': attribute type 2 has an invalid length. [ 1350.721456][T28382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6467'. [ 1351.052191][T28402] netlink: 'syz.4.6472': attribute type 39 has an invalid length. [ 1351.198495][T28404] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6473'. [ 1351.236320][T28409] netlink: 'syz.3.6473': attribute type 39 has an invalid length. [ 1352.147479][T13551] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1352.155158][T13551] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1353.913389][T28449] netlink: 'syz.0.6484': attribute type 10 has an invalid length. [ 1353.929725][T28449] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.6484'. [ 1354.384772][T28461] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 1354.424538][T28461] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6488'. [ 1354.909108][T13551] Bluetooth: hci5: unexpected subevent 0x19 length: 150 > 28 [ 1354.916976][T13551] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 1355.121794][T28489] device syzkaller0 left promiscuous mode [ 1357.170348][T28514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6504'. [ 1359.438124][T28549] netlink: 'syz.4.6515': attribute type 2 has an invalid length. [ 1360.793434][T28549] device 0 entered promiscuous mode [ 1360.832715][T28560] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6519'. [ 1360.878159][T28571] netlink: 'syz.2.6521': attribute type 40 has an invalid length. [ 1361.309858][T28583] netlink: 'syz.2.6524': attribute type 28 has an invalid length. [ 1361.338319][T28583] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6524'. [ 1362.065285][T28599] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6528'. [ 1362.352730][T28601] netlink: 'syz.1.6528': attribute type 10 has an invalid length. [ 1363.169471][T28601] bridge0: port 3(team0) entered disabled state [ 1363.295439][T28601] bridge0: port 3(team0) entered disabled state [ 1363.313913][T28618] netlink: 'syz.2.6531': attribute type 1 has an invalid length. [ 1363.326083][T28618] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1363.337807][T28601] device team_slave_0 left promiscuous mode [ 1363.363135][T28617] netlink: 'syz.2.6531': attribute type 1 has an invalid length. [ 1363.402950][T28601] team0 (unregistering): Port device team_slave_0 removed [ 1363.411657][T28617] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6531'. [ 1363.423348][T28601] device team_slave_1 left promiscuous mode [ 1363.482387][T28601] team0 (unregistering): Port device team_slave_1 removed [ 1364.965433][T28655] device pim6reg1 entered promiscuous mode [ 1365.012046][T28654] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6542'. [ 1365.757382][T28676] netlink: 'syz.3.6548': attribute type 3 has an invalid length. [ 1365.771189][T28676] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6548'. [ 1366.915251][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.927196][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.963350][T23080] Bluetooth: hci5: command 0x0406 tx timeout [ 1370.247840][T28690] netlink: 'syz.2.6551': attribute type 10 has an invalid length. [ 1370.267441][T28690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.300735][T28690] device bridge_slave_1 left promiscuous mode [ 1370.309674][T28690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.365941][T28690] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1370.777416][T13551] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 1370.785092][T13551] Bluetooth: hci0: Unable to find connection with handle 0x072f [ 1371.281015][T28730] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.6561'. [ 1371.395498][T28730] netlink: zone id is out of range [ 1371.463707][T28730] netlink: zone id is out of range [ 1371.539907][T28730] netlink: zone id is out of range [ 1371.586290][T28730] netlink: zone id is out of range [ 1371.629850][T28730] netlink: zone id is out of range [ 1371.679830][T28730] netlink: zone id is out of range [ 1371.714293][T28730] netlink: zone id is out of range [ 1371.755255][T28730] netlink: zone id is out of range [ 1371.787329][T28730] netlink: zone id is out of range [ 1371.819671][T28730] netlink: zone id is out of range [ 1375.803528][T28749] mac80211_hwsim hwsim65 »»»»»»: renamed from wlan0 [ 1379.917981][T28775] device bond_slave_1 entered promiscuous mode [ 1380.362527][T28793] netlink: 'syz.3.6572': attribute type 27 has an invalid length. [ 1380.384166][T28793] netlink: 'syz.3.6572': attribute type 3 has an invalid length. [ 1380.489972][T28793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6572'. [ 1380.765878][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1382.600076][T28812] mac80211_hwsim hwsim63 »»»»»»: renamed from wlan0 [ 1382.650806][T28815] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6580'. [ 1383.278607][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1384.583169][T28854] mac80211_hwsim hwsim61 »»»»»»: renamed from wlan0 [ 1386.031086][T28887] netlink: 'syz.0.6601': attribute type 22 has an invalid length. [ 1386.039005][T28887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6601'. [ 1386.416194][T28871] delete_channel: no stack [ 1386.709973][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1387.878439][T28921] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1387.902445][T28921] syzkaller1: group set to 778 [ 1387.922421][T28922] mac80211_hwsim hwsim67 »»»»»»: renamed from wlan0 [ 1388.256010][T28928] netlink: 'syz.2.6614': attribute type 3 has an invalid length. [ 1389.407999][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1390.371291][T28957] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1390.484197][T28959] netlink: 'syz.0.6625': attribute type 9 has an invalid length. [ 1390.524608][T28959] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6625'. [ 1390.615946][T28966] netlink: 'syz.3.6626': attribute type 29 has an invalid length. [ 1390.647650][T28966] netlink: 'syz.3.6626': attribute type 29 has an invalid length. [ 1390.681348][T28967] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.6628'. [ 1390.686159][T28969] netlink: 'syz.4.6628': attribute type 3 has an invalid length. [ 1390.737438][T28969] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6628'. [ 1390.747132][T28963] netlink: 'syz.3.6626': attribute type 29 has an invalid length. [ 1391.170656][T28978] netlink: 'syz.0.6631': attribute type 10 has an invalid length. [ 1391.351237][T28978] device macvlan0 entered promiscuous mode [ 1391.619395][T28978] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1391.689405][T28982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6631'. [ 1391.883460][T28982] : renamed from caif0 [ 1392.155612][T28982] net_ratelimit: 3618 callbacks suppressed [ 1392.155624][T28982] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1392.872007][T23080] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1392.911507][T29009] netlink: 'syz.2.6639': attribute type 4 has an invalid length. [ 1392.939750][T29009] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1394.569861][T23080] Bluetooth: hci3: command 0x0406 tx timeout [ 1394.978876][T29021] netlink: 'syz.2.6644': attribute type 3 has an invalid length. [ 1394.997822][T29021] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6644'. [ 1395.005933][T29022] netlink: 'syz.3.6640': attribute type 29 has an invalid length. [ 1395.022147][T29022] netlink: 'syz.3.6640': attribute type 29 has an invalid length. [ 1395.053893][T29024] netlink: 'syz.3.6640': attribute type 29 has an invalid length. [ 1395.241392][T29028] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1395.588123][T23080] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1397.047255][T29060] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6656'. [ 1397.079974][T29063] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6656'. [ 1397.300747][T29064] netlink: 'syz.2.6657': attribute type 10 has an invalid length. [ 1397.356773][T29064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1397.546407][T29064] bridge0: port 2(veth0_vlan) entered blocking state [ 1397.571776][T29064] bridge0: port 2(veth0_vlan) entered disabled state [ 1397.716812][T29064] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1397.912460][T29081] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1397.941344][T29082] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1397.955909][T29082] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1397.969410][T29082] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.6661'. [ 1398.052525][T29087] netlink: 'syz.1.6662': attribute type 4 has an invalid length. [ 1398.090947][T29087] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6662'. [ 1398.428098][T29069] delete_channel: no stack [ 1398.778403][T29104] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.6677'. [ 1398.849004][T29106] netlink: 'syz.4.6667': attribute type 4 has an invalid length. [ 1398.857969][T29106] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6667'. [ 1398.995128][T29109] device geneve0 entered promiscuous mode [ 1399.038867][T29109] device sit0 entered promiscuous mode [ 1400.278838][T29130] netlink: 'syz.4.6676': attribute type 28 has an invalid length. [ 1400.932198][T23080] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1401.332281][T29150] netlink: 'syz.0.6683': attribute type 4 has an invalid length. [ 1402.131498][T29166] __nla_validate_parse: 1 callbacks suppressed [ 1402.132183][T29166] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6687'. [ 1402.241080][T29168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.249413][T29168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.300488][T29170] device bridge_slave_1 left promiscuous mode [ 1402.326094][T29170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.402160][T29170] device bridge_slave_0 left promiscuous mode [ 1402.423420][T29170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.495268][T29206] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6700'. [ 1404.539968][T29206] device bridge_slave_1 entered promiscuous mode [ 1405.374538][T29218] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.6703'. [ 1405.409679][T29218] openvswitch: netlink: Key type 386 is out of range max 32 [ 1405.577358][T29228] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1405.645640][T29228] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1405.689999][T29228] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1406.279276][T23080] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1407.627653][T29285] sctp: [Deprecated]: syz.4.6721 (pid 29285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1407.627653][T29285] Use struct sctp_sack_info instead [ 1408.208066][T23080] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1408.224155][T29301] netlink: 'syz.0.6728': attribute type 27 has an invalid length. [ 1408.232645][T29301] netlink: 'syz.0.6728': attribute type 4 has an invalid length. [ 1408.240567][T29301] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6728'. [ 1408.976074][T29320] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1410.824882][T23080] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1412.237731][T29374] netlink: 'syz.4.6743': attribute type 10 has an invalid length. [ 1412.325106][T29374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6743'. [ 1412.789413][T29374] team0: Port device virt_wifi0 removed [ 1412.826896][T29374] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1412.860892][T29374] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.966235][T29374] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 1413.033496][T29390] netlink: 'syz.2.6749': attribute type 12 has an invalid length. [ 1413.071279][T29390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6749'. [ 1413.287288][T29389] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6749'. [ 1413.993746][T23080] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1415.165579][T29434] netlink: 'syz.0.6761': attribute type 2 has an invalid length. [ 1415.182931][T29439] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6763'. [ 1415.292838][T29434] netlink: 'syz.0.6761': attribute type 1 has an invalid length. [ 1415.406174][T29434] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1416.175605][T23080] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1416.694104][T29477] __sock_release: fasync list not empty! [ 1417.399445][T29490] netlink: 'syz.2.6779': attribute type 39 has an invalid length. [ 1418.137899][T29516] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.6782'. [ 1418.186261][T29519] netlink: 'syz.3.6783': attribute type 10 has an invalid length. [ 1418.471627][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1420.160344][T13551] Bluetooth: hci0: command 0x0406 tx timeout [ 1420.604130][T29549] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1420.646109][T29549] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.6793'. [ 1420.687645][T29550] netlink: 'syz.2.6794': attribute type 10 has an invalid length. [ 1420.742839][T29550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.178449][T29550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.189118][T29550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.959687][T29550] team0: Port device bridge0 added [ 1422.760773][T29561] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6796'. [ 1422.801837][T29561] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1422.887186][T29559] netlink: 'syz.4.6796': attribute type 10 has an invalid length. [ 1423.405659][T13551] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1423.413684][T13551] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1424.384837][T13551] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1424.392819][T13551] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1426.308792][T29610] netlink: 'syz.1.6814': attribute type 6 has an invalid length. [ 1426.358320][T29610] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6814'. [ 1426.400822][T29611] netlink: 'syz.1.6814': attribute type 6 has an invalid length. [ 1426.437842][T29611] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.6814'. [ 1426.898707][T13551] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1426.906282][T13551] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1427.186578][T29632] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.6829'. [ 1427.360443][T29630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1427.367878][T29630] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.375704][T29630] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.383554][T29630] IPv6: NLM_F_CREATE should be set when creating new route [ 1427.630008][T29631] device sit0 left promiscuous mode [ 1428.330202][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.336721][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.768163][T29648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6824'. [ 1429.196753][T29654] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6822'. [ 1429.420551][T29653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6825'. [ 1429.504591][T29659] netlink: 'syz.0.6827': attribute type 2 has an invalid length. [ 1429.543800][T29658] netlink: 'syz.0.6827': attribute type 2 has an invalid length. [ 1429.606942][T29659] device 0 entered promiscuous mode [ 1429.714078][T29658] device 1 entered promiscuous mode [ 1430.290845][T29674] netlink: 463 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1430.394091][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1430.453252][T29672] netlink: 'syz.1.6830': attribute type 10 has an invalid length. [ 1430.555994][T29672] device macvlan0 entered promiscuous mode [ 1431.181695][T29672] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1431.230631][T29684] netlink: 'syz.1.6830': attribute type 13 has an invalid length. [ 1431.261044][T29684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6830'. [ 1431.332041][T29684] syz_tun: refused to change device tx_queue_len [ 1431.338528][T29684] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1432.383534][T29714] netlink: 'syz.2.6842': attribute type 27 has an invalid length. [ 1432.391875][T29714] netlink: 'syz.2.6842': attribute type 4 has an invalid length. [ 1432.400406][T29714] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1432.411283][T29714] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1432.846590][T29723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.880634][T29723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.304502][T29729] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6847'. [ 1433.380058][T29729] openvswitch: netlink: Message has 6 unknown bytes. [ 1433.552751][T29723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.562010][T29723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.618863][T29723] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1433.743485][T29723] bridge0: port 3(batadv0) entered disabled state [ 1433.912091][T29723] device batadv0 left promiscuous mode [ 1433.931681][T29723] bridge0: port 3(batadv0) entered disabled state [ 1434.450199][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1435.321212][T29769] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6858'. [ 1438.844641][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1441.877351][T29805] device syzkaller0 entered promiscuous mode [ 1442.521596][T29812] netlink: 'syz.2.6870': attribute type 10 has an invalid length. [ 1442.539853][T29812] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6870'. [ 1443.112218][T29835] netlink: 'syz.0.6877': attribute type 21 has an invalid length. [ 1443.161430][T29836] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1443.209819][T29836] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1443.238484][T29836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1444.198492][T29852] netlink: 'syz.4.6882': attribute type 4 has an invalid length. [ 1444.208294][T29852] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6882'. [ 1444.685164][T29876] netlink: 'syz.3.6889': attribute type 10 has an invalid length. [ 1444.752124][T29878] netlink: 'syz.2.6887': attribute type 10 has an invalid length. [ 1444.869410][T29878] team0: Device wg1 is of different type [ 1445.211730][T29884] netlink: 'syz.3.6891': attribute type 29 has an invalid length. [ 1445.232271][T29885] netlink: 'syz.3.6891': attribute type 29 has an invalid length. [ 1445.265911][T29884] netlink: 'syz.3.6891': attribute type 29 has an invalid length. [ 1445.542541][T29890] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6894'. [ 1445.895464][T29894] netlink: 'syz.2.6895': attribute type 10 has an invalid length. [ 1445.948893][T29894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.427451][T29910] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6898'. [ 1448.714566][T29900] netlink: 'syz.4.6896': attribute type 10 has an invalid length. [ 1448.770482][T29900] team0: Device hsr_slave_0 failed to register rx_handler [ 1448.819301][T29906] device macsec0 entered promiscuous mode [ 1448.837465][T29910] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1448.990431][T29917] netlink: 'syz.0.6910': attribute type 2 has an invalid length. [ 1448.998811][T29917] netlink: 'syz.0.6910': attribute type 4 has an invalid length. [ 1449.075147][T29917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6910'. [ 1449.581873][T29939] netlink: 'syz.0.6905': attribute type 1 has an invalid length. [ 1449.596640][T29939] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1449.650426][T29946] netlink: 'syz.4.6907': attribute type 10 has an invalid length. [ 1449.770479][T29946] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1450.461065][T29968] netlink: 'syz.1.6915': attribute type 1 has an invalid length. [ 1450.478308][T29970] netlink: 'syz.2.6914': attribute type 2 has an invalid length. [ 1450.499753][T29968] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6915'. [ 1450.554191][T29970] device 0 entered promiscuous mode [ 1450.721024][T29970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6914'. [ 1451.469113][T29997] netlink: 'syz.0.6920': attribute type 29 has an invalid length. [ 1451.528965][T29997] netlink: 'syz.0.6920': attribute type 29 has an invalid length. [ 1451.566905][T29994] netlink: 'syz.0.6920': attribute type 29 has an invalid length. [ 1451.642855][T29994] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.6920'. [ 1453.273000][T30028] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1455.077860][T30063] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6941'. [ 1455.176671][T30064] validate_nla: 4 callbacks suppressed [ 1455.176691][T30064] netlink: 'syz.2.6940': attribute type 2 has an invalid length. [ 1455.263903][T30064] netlink: 'syz.2.6940': attribute type 11 has an invalid length. [ 1455.306942][T30064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6940'. [ 1455.732548][T30062] delete_channel: no stack [ 1456.260158][T30088] netlink: 'syz.4.6948': attribute type 11 has an invalid length. [ 1456.330657][T30088] netlink: 139456 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1456.540970][T30093] netlink: 'syz.3.6949': attribute type 2 has an invalid length. [ 1456.548828][T30093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6949'. [ 1456.929666][T30104] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6949'. [ 1459.233818][T30087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.132078][T30102] device syzkaller0 entered promiscuous mode [ 1463.374267][T30118] netlink: 'syz.4.6956': attribute type 21 has an invalid length. [ 1463.407457][T30118] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.6956'. [ 1463.473885][T30125] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6954'. [ 1463.549633][T30119] netlink: 'syz.4.6956': attribute type 21 has an invalid length. [ 1463.588205][T30119] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.6956'. [ 1464.195791][T30138] device syzkaller0 entered promiscuous mode [ 1464.339910][T30149] netlink: 'syz.4.6961': attribute type 10 has an invalid length. [ 1464.520667][T30149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.528575][T30149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.766268][T30149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.774065][T30149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.783427][T30149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.790949][T30149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.931227][T30149] team0: Port device bridge0 added [ 1468.475348][T30163] netlink: 'syz.2.6966': attribute type 21 has an invalid length. [ 1468.483968][T30163] netlink: 'syz.2.6966': attribute type 12 has an invalid length. [ 1468.492980][T30163] netlink: 'syz.2.6966': attribute type 13 has an invalid length. [ 1468.501695][T30163] netlink: 'syz.2.6966': attribute type 14 has an invalid length. [ 1468.519828][T30163] netlink: 'syz.2.6966': attribute type 15 has an invalid length. [ 1468.527849][T30163] netlink: 'syz.2.6966': attribute type 16 has an invalid length. [ 1468.559667][T30163] netlink: 'syz.2.6966': attribute type 19 has an invalid length. [ 1468.567683][T30163] netlink: 12866 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1468.686930][T30172] netlink: 'syz.0.6968': attribute type 22 has an invalid length. [ 1468.710545][T30172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6968'. [ 1468.761450][T30175] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6970'. [ 1469.146699][T30175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.183892][T30175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.240494][T30175] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1469.274367][T30175] bond0 (unregistering): Released all slaves [ 1469.310985][T30184] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6972'. [ 1471.375959][T30248] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6989'. [ 1472.040125][T30256] netlink: 'syz.0.6993': attribute type 10 has an invalid length. [ 1477.736296][T30265] netlink: 'syz.3.6994': attribute type 22 has an invalid length. [ 1477.749884][T30265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6994'. [ 1477.825718][T30266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6994'. [ 1477.859916][T30267] netlink: 'syz.3.6994': attribute type 10 has an invalid length. [ 1478.678414][T30299] netlink: 'syz.4.7001': attribute type 3 has an invalid length. [ 1478.689900][T30299] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7001'. [ 1479.174223][T30318] netlink: 'syz.0.7006': attribute type 21 has an invalid length. [ 1479.214956][T30318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7006'. [ 1480.227408][T30331] netlink: 'syz.2.7010': attribute type 4 has an invalid length. [ 1480.256457][T30331] netlink: 'syz.2.7010': attribute type 8 has an invalid length. [ 1480.313674][T30331] netlink: 193092 bytes leftover after parsing attributes in process `syz.2.7010'. [ 1481.112049][T30354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7017'. [ 1482.162003][T30380] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.7023'. [ 1482.903051][T30390] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1482.937096][T30388] netlink: 'syz.2.7026': attribute type 13 has an invalid length. [ 1482.946763][T30388] netlink: 'syz.2.7026': attribute type 14 has an invalid length. [ 1482.961953][T30388] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7026'. [ 1486.799662][T30456] netlink: 'syz.0.7043': attribute type 3 has an invalid length. [ 1486.868863][T30456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1486.975785][T30456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.000262][T30456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.015143][T30456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.038128][T30456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.991680][T30496] netlink: 'syz.4.7056': attribute type 10 has an invalid length. [ 1488.022621][T30496] device macvlan0 entered promiscuous mode [ 1488.095907][T30496] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1488.584359][T30501] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7059'. [ 1489.244149][T13551] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 1489.761949][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.768474][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.839983][T30556] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1492.939889][T30556] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1492.961117][T30556] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1493.257804][T30577] netlink: 'syz.2.7077': attribute type 10 has an invalid length. [ 1493.374977][T30577] team0: Device hsr_slave_0 failed to register rx_handler [ 1493.485682][T30586] netlink: 'syz.4.7078': attribute type 17 has an invalid length. [ 1493.513776][T30586] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1493.751636][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1495.496532][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1495.633374][T30654] netlink: 'syz.0.7099': attribute type 3 has an invalid length. [ 1495.657231][T30654] netlink: 'syz.0.7099': attribute type 8 has an invalid length. [ 1495.675168][T30654] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.7099'. [ 1496.718969][T30678] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.7107'. [ 1496.804344][T30683] netlink: 'syz.3.7108': attribute type 3 has an invalid length. [ 1496.862488][T30683] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7108'. [ 1497.613083][T30699] ref_ctr_offset mismatch. inode: 0x314 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1497.627167][T30703] netlink: 'syz.3.7115': attribute type 21 has an invalid length. [ 1497.636443][T30703] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7115'. [ 1497.658443][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1497.929578][T30710] netlink: 'syz.2.7118': attribute type 6 has an invalid length. [ 1497.947730][T30710] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7118'. [ 1499.231657][T30737] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7124'. [ 1499.652285][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1500.152930][T30752] netlink: 3529 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1500.213960][T30752] netlink: 45005 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1500.268481][T30752] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1500.533896][T30763] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7134'. [ 1501.081727][T30779] À: port 1(vlan0) entered blocking state [ 1501.100193][T30779] À: port 1(vlan0) entered disabled state [ 1501.135901][T30779] device vlan0 entered promiscuous mode [ 1501.225233][T30784] netlink: 'syz.2.7139': attribute type 10 has an invalid length. [ 1501.262613][T30778] netlink: 'syz.4.7137': attribute type 3 has an invalid length. [ 1501.412410][T30778] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1501.690078][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1505.427574][T30800] delete_channel: no stack [ 1505.476948][T30803] netlink: 'syz.3.7146': attribute type 3 has an invalid length. [ 1505.487254][T30803] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7146'. [ 1505.618349][T30810] netlink: 'syz.1.7148': attribute type 3 has an invalid length. [ 1505.731938][T30812] netlink: 'syz.1.7148': attribute type 3 has an invalid length. [ 1506.284310][T30814] device syzkaller0 entered promiscuous mode [ 1507.438330][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1507.985842][T30839] netlink: 'syz.1.7155': attribute type 3 has an invalid length. [ 1508.068545][T30839] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7155'. [ 1511.680196][T30845] netlink: 'syz.4.7156': attribute type 2 has an invalid length. [ 1511.688074][T30845] netlink: 'syz.4.7156': attribute type 8 has an invalid length. [ 1511.729866][T30845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1511.750790][T30844] netlink: 'syz.4.7156': attribute type 2 has an invalid length. [ 1511.758615][T30844] netlink: 'syz.4.7156': attribute type 8 has an invalid length. [ 1511.776502][T30844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7156'. [ 1512.059846][T30861] netlink: 'syz.2.7160': attribute type 10 has an invalid length. [ 1512.205735][T30861] team0: Port device macvlan0 added [ 1512.224973][T30863] netlink: 'syz.3.7161': attribute type 2 has an invalid length. [ 1512.244686][T30863] netlink: 'syz.3.7161': attribute type 8 has an invalid length. [ 1512.278940][T30863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7161'. [ 1513.445027][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1517.777678][T30930] netlink: 'syz.0.7178': attribute type 2 has an invalid length. [ 1517.817100][T30930] netlink: 'syz.0.7178': attribute type 8 has an invalid length. [ 1517.845896][T30930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7178'. [ 1517.928324][T30942] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7181'. [ 1517.992681][T30941] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7181'. [ 1518.001693][T30944] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1518.088231][T30938] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7182'. [ 1519.092814][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1520.271842][T30974] device syzkaller0 entered promiscuous mode [ 1521.065622][T30988] netlink: 'syz.4.7193': attribute type 2 has an invalid length. [ 1521.094970][T30988] netlink: 'syz.4.7193': attribute type 8 has an invalid length. [ 1521.111784][T30988] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7193'. [ 1521.295979][T31002] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7197'. [ 1521.358128][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1521.370392][T31006] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7197'. [ 1521.716355][T31021] netlink: 'syz.2.7204': attribute type 2 has an invalid length. [ 1521.739726][T31021] netlink: 'syz.2.7204': attribute type 8 has an invalid length. [ 1521.761647][T31021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7204'. [ 1521.900978][T31030] netlink: 'syz.3.7208': attribute type 28 has an invalid length. [ 1521.909024][T31030] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7208'. [ 1522.747678][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1522.997706][T31052] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7213'. [ 1526.311830][T31049] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7213'. [ 1526.745998][T31080] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.7220'. [ 1526.886016][T31085] netlink: 'syz.3.7223': attribute type 10 has an invalid length. [ 1526.909984][T31085] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.942050][T31085] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.965237][T31085] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.979277][T31085] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.077093][T31085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.116827][T31085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.136416][T31085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.166239][T31085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.192382][T31085] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1528.309093][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1528.544546][T31139] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7236'. [ 1528.580247][T31139] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.7236'. [ 1529.944108][T31171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7247'. [ 1530.038904][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1530.164626][T31179] netlink: 'syz.2.7249': attribute type 39 has an invalid length. [ 1530.930639][T31189] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7253'. [ 1531.432158][T31196] netlink: 'syz.2.7255': attribute type 10 has an invalid length. [ 1531.533010][T31206] netlink: 'syz.0.7257': attribute type 11 has an invalid length. [ 1531.558326][T31206] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7257'. [ 1531.664196][T31205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.935515][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1535.371076][T31260] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7270'. [ 1535.450201][T31265] netlink: 'syz.2.7274': attribute type 10 has an invalid length. [ 1535.469374][T31265] team0: Device wg1 is of different type [ 1535.533095][T31268] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7274'. [ 1535.739024][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1536.039110][T31279] netlink: 'syz.3.7278': attribute type 13 has an invalid length. [ 1536.074579][T31279] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1536.155892][T31279] erspan0: refused to change device tx_queue_len [ 1536.187488][T31279] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1536.216997][T31279] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1536.864439][T31302] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.7286'. [ 1536.982607][T31302] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1537.075806][T31305] device vcan0 entered promiscuous mode [ 1537.162478][T31305] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1538.219537][T31320] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7290'. [ 1538.446231][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1538.920688][T13551] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 1538.938621][T31329] netlink: 'syz.2.7292': attribute type 4 has an invalid length. [ 1542.545785][T31366] netlink: 'syz.1.7300': attribute type 21 has an invalid length. [ 1542.557177][T31366] netlink: 'syz.1.7300': attribute type 6 has an invalid length. [ 1543.306026][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1543.628984][T31383] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.7306'. [ 1543.725675][T31382] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.7306'. [ 1544.050488][T31404] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7312'. [ 1544.168757][T31412] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7314'. [ 1544.199761][T31412] openvswitch: netlink: Message has 6 unknown bytes. [ 1544.256165][T31415] netlink: 'syz.0.7313': attribute type 29 has an invalid length. [ 1544.280999][T31415] netlink: 'syz.0.7313': attribute type 29 has an invalid length. [ 1544.313640][T31422] netlink: 'syz.0.7313': attribute type 29 has an invalid length. [ 1544.325125][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1544.340706][T31415] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.7313'. [ 1545.057979][T31440] netlink: 'syz.4.7324': attribute type 10 has an invalid length. [ 1545.066280][T31440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7324'. [ 1545.165680][T31440] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1546.414802][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1546.927737][T31480] netlink: 'syz.1.7336': attribute type 10 has an invalid length. [ 1547.021970][T31485] netlink: 'syz.2.7339': attribute type 29 has an invalid length. [ 1547.036224][T31481] netlink: 'syz.0.7335': attribute type 2 has an invalid length. [ 1547.049406][T31481] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.7335'. [ 1547.223478][T31485] netlink: 'syz.2.7339': attribute type 29 has an invalid length. [ 1548.214391][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1548.703110][T31528] validate_nla: 1 callbacks suppressed [ 1548.703133][T31528] netlink: 'syz.1.7350': attribute type 10 has an invalid length. [ 1549.363631][T31541] netlink: 'syz.4.7354': attribute type 3 has an invalid length. [ 1549.371914][T31541] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7354'. [ 1549.815478][T31547] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7355'. [ 1549.828930][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1549.876370][T31547] device hsr_slave_0 left promiscuous mode [ 1549.897587][T31547] device hsr_slave_1 left promiscuous mode [ 1550.162038][T31556] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7355'. [ 1550.668870][T31572] netlink: 'syz.4.7364': attribute type 27 has an invalid length. [ 1550.697402][T31572] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7364'. [ 1551.211508][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.218062][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.760040][T31595] netlink: 'syz.3.7368': attribute type 10 has an invalid length. [ 1552.081885][T31608] netlink: 'syz.0.7372': attribute type 10 has an invalid length. [ 1552.184559][T31608] team0: Device vxcan1 is of different type [ 1552.240900][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1552.478866][T31613] netlink: 'syz.3.7374': attribute type 21 has an invalid length. [ 1552.529176][T31613] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7374'. [ 1552.577262][T31613] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7374'. [ 1553.537818][T31648] netlink: 'syz.2.7384': attribute type 10 has an invalid length. [ 1553.557138][T13551] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 1553.694401][T31648] team0: Device wg1 is of different type [ 1553.831291][T31640] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1553.931279][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1553.954545][T31662] netlink: 'syz.0.7390': attribute type 3 has an invalid length. [ 1553.964190][T31662] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7390'. [ 1554.113548][T31667] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7394'. [ 1554.146097][T31667] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7394'. [ 1554.165258][T31673] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7394'. [ 1554.500639][T31680] netlink: 'syz.4.7397': attribute type 15 has an invalid length. [ 1554.549120][T31680] netlink: 'syz.4.7397': attribute type 16 has an invalid length. [ 1554.600046][T31680] netlink: 'syz.4.7397': attribute type 20 has an invalid length. [ 1554.659300][T31680] netlink: 'syz.4.7397': attribute type 21 has an invalid length. [ 1554.689611][T31680] netlink: 'syz.4.7397': attribute type 23 has an invalid length. [ 1554.697837][T31680] netlink: 'syz.4.7397': attribute type 25 has an invalid length. [ 1554.706438][T31680] netlink: 15862 bytes leftover after parsing attributes in process `syz.4.7397'. [ 1555.147670][T31691] netlink: 'syz.4.7401': attribute type 10 has an invalid length. [ 1555.474329][T31691] team0: Device wg1 is of different type [ 1555.870852][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1556.216953][T31714] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.7406'. [ 1556.263838][T31718] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1556.455388][T31724] netlink: 'syz.2.7410': attribute type 10 has an invalid length. [ 1556.954495][T31728] device syzkaller0 entered promiscuous mode [ 1556.974034][T31742] netlink: 'syz.3.7415': attribute type 29 has an invalid length. [ 1557.641529][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1560.856639][T31770] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7423'. [ 1560.890049][T31772] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7423'. [ 1561.090385][T31775] validate_nla: 4 callbacks suppressed [ 1561.090406][T31775] netlink: 'syz.0.7424': attribute type 10 has an invalid length. [ 1561.157268][T31775] team0: Port device wlan1 added [ 1561.301015][T31791] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1561.316940][T31791] netlink: zone id is out of range [ 1561.322519][T31791] netlink: zone id is out of range [ 1561.328145][T31791] netlink: get zone limit has 8 unknown bytes [ 1562.089813][T31808] IPv6: NLM_F_CREATE should be specified when creating new route [ 1562.097828][T31808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1562.105365][T31808] IPv6: NLM_F_CREATE should be set when creating new route [ 1562.112827][T31808] IPv6: NLM_F_CREATE should be set when creating new route [ 1562.120344][T31808] IPv6: NLM_F_CREATE should be set when creating new route [ 1562.284901][T31809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1562.308511][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1562.643621][T31829] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7440'. [ 1562.681922][T31830] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7440'. [ 1562.740399][T31830] netlink: zone id is out of range [ 1562.750000][T31830] netlink: zone id is out of range [ 1562.769619][T31830] netlink: zone id is out of range [ 1562.787942][T31830] netlink: zone id is out of range [ 1562.800464][T31835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7441'. [ 1562.809806][T31830] netlink: zone id is out of range [ 1562.816433][T31830] netlink: zone id is out of range [ 1562.823377][T31830] netlink: zone id is out of range [ 1562.830049][T31835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7441'. [ 1562.841832][T31835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7441'. [ 1563.058382][T31843] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7444'. [ 1563.174812][T31842] device syzkaller0 entered promiscuous mode [ 1563.270480][T31842] netlink: 'syz.0.7445': attribute type 27 has an invalid length. [ 1563.293596][T31842] netlink: 'syz.0.7445': attribute type 3 has an invalid length. [ 1563.310880][T31842] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7445'. [ 1563.329453][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1565.811530][T31907] delete_channel: no stack [ 1567.440380][T31881] __nla_validate_parse: 1 callbacks suppressed [ 1567.440397][T31881] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7455'. [ 1567.474254][T31884] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1567.493283][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7454'. [ 1567.677906][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1571.345469][T31945] netlink: 'syz.1.7469': attribute type 10 has an invalid length. [ 1572.588583][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1572.935303][T31982] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7480'. [ 1575.144043][T31992] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7482'. [ 1575.392472][T31996] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.7486'. [ 1576.190916][T31996] netlink: 'syz.1.7486': attribute type 27 has an invalid length. [ 1576.456938][T31996] bond0: (slave bond_slave_0): Releasing backup interface [ 1576.784946][T13551] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1576.792615][T13551] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1578.316674][T13551] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1578.325089][T13551] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1578.848355][T32077] netlink: 'syz.3.7512': attribute type 29 has an invalid length. [ 1578.903955][T32077] netlink: 'syz.3.7512': attribute type 29 has an invalid length. [ 1578.957584][T32080] netlink: 'syz.3.7512': attribute type 29 has an invalid length. [ 1579.390321][T32086] can: request_module (can-proto-0) failed. [ 1579.594722][T13551] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1579.602427][T13551] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1580.971769][T32139] netlink: 'syz.3.7529': attribute type 21 has an invalid length. [ 1580.990300][T32139] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7529'. [ 1583.036839][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1583.205444][T32202] netlink: 'syz.2.7534': attribute type 27 has an invalid length. [ 1583.245504][T32202] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7534'. [ 1583.796285][T32216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7539'. [ 1585.160803][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1585.962215][T32241] netlink: 'syz.3.7546': attribute type 10 has an invalid length. [ 1585.991095][T32241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.388845][T32257] netlink: 'syz.0.7551': attribute type 29 has an invalid length. [ 1586.444402][T32257] netlink: 'syz.0.7551': attribute type 29 has an invalid length. [ 1586.473501][T32259] netlink: 'syz.0.7551': attribute type 29 has an invalid length. [ 1586.818194][T32267] netlink: 'syz.4.7555': attribute type 28 has an invalid length. [ 1586.855224][T32267] netlink: 'syz.4.7555': attribute type 3 has an invalid length. [ 1586.893358][T32267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7555'. [ 1587.132778][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1587.156129][T32279] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.7559'. [ 1587.721948][T32298] netlink: 'syz.2.7568': attribute type 29 has an invalid length. [ 1587.759347][T32298] netlink: 'syz.2.7568': attribute type 29 has an invalid length. [ 1587.781364][T32306] netlink: 'syz.2.7568': attribute type 29 has an invalid length. [ 1588.100769][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1588.454651][T32320] can: request_module (can-proto-0) failed. [ 1588.501181][T32322] netlink: 'syz.1.7574': attribute type 10 has an invalid length. [ 1588.594687][T32322] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1589.009951][T32330] device syzkaller0 entered promiscuous mode [ 1591.652802][T32360] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.7582'. [ 1594.475089][T32357] netlink: 'syz.1.7583': attribute type 10 has an invalid length. [ 1594.484128][T32357] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7583'. [ 1594.513720][T32362] netlink: 'syz.3.7584': attribute type 21 has an invalid length. [ 1594.523449][T32362] netlink: 'syz.3.7584': attribute type 3 has an invalid length. [ 1594.532152][T32362] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7584'. [ 1594.786906][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1594.841617][T32376] netlink: 'syz.4.7589': attribute type 1 has an invalid length. [ 1594.876943][T32381] netlink: 'syz.2.7590': attribute type 21 has an invalid length. [ 1594.884786][T32376] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.7589'. [ 1594.896432][T32381] netlink: 'syz.2.7590': attribute type 4 has an invalid length. [ 1595.528125][T32393] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.7594'. [ 1595.535074][T32386] netlink: 'syz.1.7592': attribute type 2 has an invalid length. [ 1595.549367][T32386] netlink: 'syz.1.7592': attribute type 1 has an invalid length. [ 1595.562761][T32386] netlink: 'syz.1.7592': attribute type 4 has an invalid length. [ 1595.574638][T32386] netlink: 208568 bytes leftover after parsing attributes in process `syz.1.7592'. [ 1596.008414][T32411] netlink: 'syz.0.7599': attribute type 10 has an invalid length. [ 1596.027712][T32411] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7599'. [ 1596.234293][T32419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7601'. [ 1596.268793][T32419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.336119][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1596.425206][T32419] device bridge_slave_0 left promiscuous mode [ 1596.459775][T32419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.865343][T32435] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7605'. [ 1597.096466][T32446] bridge0: port 3(veth1) entered blocking state [ 1597.115334][T32446] bridge0: port 3(veth1) entered disabled state [ 1597.132116][T32451] net_ratelimit: 17 callbacks suppressed [ 1597.132135][T32451] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1597.147266][T32446] device veth1 entered promiscuous mode [ 1597.153822][T32446] bridge0: port 3(veth1) entered blocking state [ 1597.160399][T32446] bridge0: port 3(veth1) entered forwarding state [ 1597.199141][T32449] device syzkaller0 left promiscuous mode [ 1597.234147][T32452] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7611'. [ 1597.913601][T32478] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.7618'. [ 1600.682361][T32515] device syzkaller0 entered promiscuous mode [ 1605.128681][T32560] validate_nla: 5 callbacks suppressed [ 1605.128874][T32560] netlink: 'syz.4.7638': attribute type 1 has an invalid length. [ 1605.192515][T32560] netlink: 'syz.4.7638': attribute type 4 has an invalid length. [ 1605.250118][T32560] __nla_validate_parse: 1 callbacks suppressed [ 1605.250139][T32560] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7638'. [ 1606.207707][T32581] netlink: 'syz.3.7642': attribute type 10 has an invalid length. [ 1606.436685][T32589] netlink: 'syz.4.7646': attribute type 2 has an invalid length. [ 1606.460782][T32589] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.7646'. [ 1606.816972][T32590] netlink: 'syz.4.7646': attribute type 27 has an invalid length. [ 1606.844305][T32598] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7648'. [ 1607.097152][T32598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.207954][T32598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.346954][T32598] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1607.391465][T32598] bond0 (unregistering): Released all slaves [ 1608.119872][T32620] device syzkaller0 left promiscuous mode [ 1608.775872][T32637] netlink: 'syz.3.7657': attribute type 21 has an invalid length. [ 1608.785008][T32637] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7657'. [ 1608.814093][T32637] netlink: 'syz.3.7657': attribute type 5 has an invalid length. [ 1610.296597][T32642] netlink: 'syz.2.7659': attribute type 10 has an invalid length. [ 1612.651496][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.657964][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.349225][T32710] netlink: 'syz.2.7673': attribute type 1 has an invalid length. [ 1615.389907][T32710] netlink: 'syz.2.7673': attribute type 4 has an invalid length. [ 1615.398251][T32710] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7673'. [ 1618.579334][ T303] netlink: 'syz.0.7691': attribute type 2 has an invalid length. [ 1619.377480][ T303] device 2 entered promiscuous mode [ 1620.470352][T13551] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 1620.623210][ T361] netlink: 'syz.2.7705': attribute type 3 has an invalid length. [ 1620.635443][ T361] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7705'. [ 1621.034931][ T352] netlink: 'syz.4.7703': attribute type 2 has an invalid length. [ 1621.043369][ T352] netlink: 'syz.4.7703': attribute type 8 has an invalid length. [ 1621.060396][ T352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7703'. [ 1621.321838][ T375] netlink: 'syz.4.7707': attribute type 29 has an invalid length. [ 1621.483117][ T375] netlink: 'syz.4.7707': attribute type 29 has an invalid length. [ 1621.673351][ T375] netlink: 'syz.4.7707': attribute type 29 has an invalid length. [ 1622.994060][ T419] netlink: 'syz.4.7720': attribute type 29 has an invalid length. [ 1623.009805][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1623.038011][ T419] netlink: 'syz.4.7720': attribute type 29 has an invalid length. [ 1624.179877][ T418] delete_channel: no stack [ 1624.846210][ T447] netlink: 'syz.1.7723': attribute type 1 has an invalid length. [ 1624.947373][ T447] netlink: 'syz.1.7723': attribute type 4 has an invalid length. [ 1625.024404][ T447] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7723'. [ 1625.414667][ T446] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1626.073209][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1626.398049][ T480] validate_nla: 1 callbacks suppressed [ 1626.398067][ T480] netlink: 'syz.0.7737': attribute type 153 has an invalid length. [ 1626.479800][ T480] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.7737'. [ 1627.148902][ T501] netlink: 'syz.0.7742': attribute type 1 has an invalid length. [ 1627.159085][ T501] netlink: 'syz.0.7742': attribute type 4 has an invalid length. [ 1627.171815][ T501] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7742'. [ 1627.507644][T13551] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1627.939104][T13551] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1628.180545][ T542] netlink: 'syz.4.7751': attribute type 4 has an invalid length. [ 1628.199767][ T543] netlink: 'syz.0.7754': attribute type 21 has an invalid length. [ 1629.313154][ T562] netlink: 'syz.2.7760': attribute type 30 has an invalid length. [ 1629.372560][ T559] netlink: 'syz.3.7758': attribute type 2 has an invalid length. [ 1629.514773][ T566] netlink: 'syz.4.7761': attribute type 10 has an invalid length. [ 1629.719054][ T566] team0 (unregistering): Port device team_slave_0 removed [ 1629.803851][ T566] team0 (unregistering): Port device team_slave_1 removed [ 1629.817470][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1629.846195][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.853707][ T583] netlink: 'syz.2.7766': attribute type 3 has an invalid length. [ 1629.862332][ T583] netlink: 'syz.2.7766': attribute type 1 has an invalid length. [ 1629.870806][ T583] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7766'. [ 1629.899998][ T566] team0 (unregistering): Port device bridge0 removed [ 1630.188084][ T597] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7770'. [ 1631.805006][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1632.049878][T13551] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 1636.017129][ T678] validate_nla: 2 callbacks suppressed [ 1636.017149][ T678] netlink: 'syz.1.7790': attribute type 13 has an invalid length. [ 1636.045986][ T678] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7790'. [ 1636.104953][ T678] syz_tun: refused to change device tx_queue_len [ 1636.232188][ T678] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1636.712396][T13551] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1636.720125][T13551] Bluetooth: hci4: Unable to find connection with handle 0x072f [ 1637.263076][ T714] netlink: 'syz.4.7801': attribute type 1 has an invalid length. [ 1637.276982][ T714] netlink: 'syz.4.7801': attribute type 4 has an invalid length. [ 1637.311476][ T714] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7801'. [ 1637.414718][ T724] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7802'. [ 1637.508310][ T722] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.7805'. [ 1637.923930][ T743] netlink: 'syz.1.7809': attribute type 10 has an invalid length. [ 1638.154040][T13551] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 1638.162206][T13551] Bluetooth: hci0: Unable to find connection with handle 0x072f [ 1638.266285][ T753] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7812'. [ 1638.711573][ T767] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.7815'. [ 1638.722543][ T772] netlink: 'syz.4.7816': attribute type 17 has an invalid length. [ 1638.783817][ T767] openvswitch: netlink: Flow actions attr not present in new flow. [ 1638.795826][ T772] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7816'. [ 1638.857634][ T772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1639.100973][ T775] sctp: [Deprecated]: syz.4.7816 (pid 775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1639.100973][ T775] Use struct sctp_sack_info instead [ 1639.389860][ T789] netlink: 'syz.0.7818': attribute type 1 has an invalid length. [ 1639.414536][ T789] netlink: 'syz.0.7818': attribute type 4 has an invalid length. [ 1639.436751][ T789] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7818'. [ 1642.453780][ T796] netlink: 'syz.1.7821': attribute type 10 has an invalid length. [ 1643.002120][T13551] Bluetooth: hci5: unexpected subevent 0x19 length: 150 > 28 [ 1643.010036][T13551] Bluetooth: hci5: Unable to find connection with handle 0x072f [ 1644.857367][ T852] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1644.956488][ T852] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7832'. [ 1645.166606][ T858] netlink: 'syz.0.7833': attribute type 1 has an invalid length. [ 1645.259686][ T858] netlink: 'syz.0.7833': attribute type 4 has an invalid length. [ 1645.297024][ T858] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7833'. [ 1646.291756][ T883] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7841'. [ 1646.525646][ T878] bridge0: port 3(veth1) entered disabled state [ 1646.532734][ T878] bridge0: port 4(ip6gretap0) entered disabled state [ 1646.540075][ T878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.547910][ T878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.954765][ T878] device veth1 left promiscuous mode [ 1646.988406][ T878] bridge0: port 3(veth1) entered disabled state [ 1647.125859][ T878] device ip6gretap0 left promiscuous mode [ 1647.155051][ T878] bridge0: port 4(ip6gretap0) entered disabled state [ 1647.176135][ T878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.215956][ T878] device bridge_slave_0 left promiscuous mode [ 1647.234795][ T878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.680451][ T930] netlink: 'syz.3.7848': attribute type 1 has an invalid length. [ 1648.688541][ T934] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7847'. [ 1648.776529][ T930] netlink: 'syz.3.7848': attribute type 4 has an invalid length. [ 1648.839308][ T930] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1648.863453][ T936] netlink: 'syz.0.7849': attribute type 2 has an invalid length. [ 1648.920139][ T936] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7849'. [ 1648.949842][ T934] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7847'. [ 1650.061712][ T940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1651.140579][ T948] delete_channel: no stack [ 1651.962535][ T967] netlink: 'syz.2.7858': attribute type 27 has an invalid length. [ 1652.672360][ T981] netlink: 'syz.4.7860': attribute type 3 has an invalid length. [ 1652.769639][ T981] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7860'. [ 1653.202297][ T994] can: request_module (can-proto-0) failed. [ 1653.306447][ T1000] netlink: 'syz.1.7865': attribute type 1 has an invalid length. [ 1653.325782][ T1000] netlink: 'syz.1.7865': attribute type 4 has an invalid length. [ 1653.348268][ T1000] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7865'. [ 1653.916733][ T1029] netlink: 'syz.4.7870': attribute type 1 has an invalid length. [ 1653.935005][ T1029] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.7870'. [ 1653.959284][ T1029] netlink: 'syz.4.7870': attribute type 4 has an invalid length. [ 1653.999955][ T1029] netlink: 'syz.4.7870': attribute type 1 has an invalid length. [ 1654.018319][ T1029] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.7870'. [ 1654.217455][ T1036] netlink: 'syz.0.7868': attribute type 11 has an invalid length. [ 1654.304585][ T1036] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.7868'. [ 1654.407315][ T1038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1654.434496][ T1038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1654.486784][ T1040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1654.573104][ T1038] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7872'. [ 1656.054598][ T1067] tap0: tun_chr_ioctl cmd 1074025675 [ 1656.101734][ T1067] tap0: persist disabled [ 1656.476005][ T1074] netlink: 'syz.0.7879': attribute type 1 has an invalid length. [ 1656.507321][ T1074] netlink: 'syz.0.7879': attribute type 4 has an invalid length. [ 1656.546924][ T1074] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7879'. [ 1658.390163][ T1089] netlink: 'syz.4.7883': attribute type 3 has an invalid length. [ 1658.398007][ T1089] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1658.433161][ T1093] netlink: 'syz.0.7885': attribute type 3 has an invalid length. [ 1658.443699][ T1093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1660.002514][ T1116] netlink: 'syz.4.7893': attribute type 10 has an invalid length. [ 1660.105942][ T1119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1660.115775][ T1119] IPv6: NLM_F_CREATE should be set when creating new route [ 1660.127264][ T1119] IPv6: NLM_F_CREATE should be set when creating new route [ 1660.137421][ T1119] IPv6: NLM_F_CREATE should be set when creating new route [ 1660.974218][ T1133] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7895'. [ 1662.462230][ T1138] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.7897'. [ 1664.440159][ T1181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7907'. [ 1664.939254][ T1195] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7910'. [ 1665.957699][ T1204] FAULT_INJECTION: forcing a failure. [ 1665.957699][ T1204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.978161][ T1204] CPU: 1 PID: 1204 Comm: syz.2.7911 Not tainted syzkaller #0 [ 1665.985641][ T1204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1665.995909][ T1204] Call Trace: [ 1665.999279][ T1204] [ 1666.002266][ T1204] dump_stack_lvl+0x188/0x24e [ 1666.007044][ T1204] ? show_regs_print_info+0x12/0x12 [ 1666.012310][ T1204] ? load_image+0x410/0x410 [ 1666.016916][ T1204] ? __lock_acquire+0x7c40/0x7c40 [ 1666.022034][ T1204] ? cap_capable+0x189/0x220 [ 1666.026964][ T1204] should_fail_ex+0x390/0x4c0 [ 1666.031721][ T1204] _copy_from_user+0x2c/0x170 [ 1666.036574][ T1204] __sys_bpf+0x2ea/0x780 [ 1666.040950][ T1204] ? bpf_link_show_fdinfo+0x380/0x380 [ 1666.046412][ T1204] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1666.052660][ T1204] __x64_sys_bpf+0x78/0x90 [ 1666.057244][ T1204] do_syscall_64+0x4c/0xa0 [ 1666.061726][ T1204] ? clear_bhb_loop+0x60/0xb0 [ 1666.066645][ T1204] ? clear_bhb_loop+0x60/0xb0 [ 1666.071475][ T1204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1666.077785][ T1204] RIP: 0033:0x7f5e00b9e0d9 [ 1666.082267][ T1204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.102631][ T1204] RSP: 002b:00007f5e01a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1666.111199][ T1204] RAX: ffffffffffffffda RBX: 00007f5e00e25fa0 RCX: 00007f5e00b9e0d9 [ 1666.119226][ T1204] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1666.127282][ T1204] RBP: 00007f5e01a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.135317][ T1204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1666.143567][ T1204] R13: 00007f5e00e26038 R14: 00007f5e00e25fa0 R15: 00007fff065a2568 [ 1666.151618][ T1204] [ 1666.482768][T13551] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 1666.490430][T13551] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 1667.047243][ T1238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7922'. [ 1670.499633][ T1244] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7924'. [ 1670.692697][ T1269] FAULT_INJECTION: forcing a failure. [ 1670.692697][ T1269] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.789685][ T1269] CPU: 1 PID: 1269 Comm: syz.0.7930 Not tainted syzkaller #0 [ 1670.797169][ T1269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1670.807461][ T1269] Call Trace: [ 1670.810885][ T1269] [ 1670.813856][ T1269] dump_stack_lvl+0x188/0x24e [ 1670.818671][ T1269] ? show_regs_print_info+0x12/0x12 [ 1670.824289][ T1269] ? load_image+0x410/0x410 [ 1670.828858][ T1269] should_fail_ex+0x390/0x4c0 [ 1670.833668][ T1269] should_failslab+0x5/0x20 [ 1670.838201][ T1269] slab_pre_alloc_hook+0x59/0x300 [ 1670.843423][ T1269] ? verify_lock_unused+0x140/0x140 [ 1670.848691][ T1269] ? bpf_test_init+0x9f/0x140 [ 1670.853488][ T1269] __kmem_cache_alloc_node+0x4f/0x270 [ 1670.858924][ T1269] ? bpf_test_init+0x9f/0x140 [ 1670.863655][ T1269] __kmalloc+0xa3/0x240 [ 1670.867916][ T1269] bpf_test_init+0x9f/0x140 [ 1670.872560][ T1269] bpf_prog_test_run_xdp+0x488/0xf80 [ 1670.877910][ T1269] ? __lock_acquire+0x7c40/0x7c40 [ 1670.883011][ T1269] ? dev_put+0x80/0x80 [ 1670.887214][ T1269] ? dev_put+0x80/0x80 [ 1670.891351][ T1269] bpf_prog_test_run+0x31c/0x390 [ 1670.896362][ T1269] __sys_bpf+0x62b/0x780 [ 1670.900642][ T1269] ? bpf_link_show_fdinfo+0x380/0x380 [ 1670.906073][ T1269] ? lock_chain_count+0x20/0x20 [ 1670.911172][ T1269] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1670.917209][ T1269] __x64_sys_bpf+0x78/0x90 [ 1670.921753][ T1269] do_syscall_64+0x4c/0xa0 [ 1670.926229][ T1269] ? clear_bhb_loop+0x60/0xb0 [ 1670.930941][ T1269] ? clear_bhb_loop+0x60/0xb0 [ 1670.935652][ T1269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1670.941708][ T1269] RIP: 0033:0x7f1269d9e0d9 [ 1670.946153][ T1269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.965990][ T1269] RSP: 002b:00007f1267ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1670.974443][ T1269] RAX: ffffffffffffffda RBX: 00007f126a025fa0 RCX: 00007f1269d9e0d9 [ 1670.982442][ T1269] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1670.990479][ T1269] RBP: 00007f1267ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.998481][ T1269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.006490][ T1269] R13: 00007f126a026038 R14: 00007f126a025fa0 R15: 00007ffc81dd5088 [ 1671.014688][ T1269] [ 1671.209308][T13551] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1671.222365][T13551] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1671.241468][ T1288] netlink: 'syz.4.7935': attribute type 21 has an invalid length. [ 1671.289929][ T1288] netlink: 'syz.4.7935': attribute type 6 has an invalid length. [ 1671.298413][ T1288] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7935'. [ 1671.406965][ T1296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7936'. [ 1671.726256][ T1312] netlink: 'syz.0.7943': attribute type 1 has an invalid length. [ 1671.780948][ T1312] netlink: 14690 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1672.141553][ T1327] FAULT_INJECTION: forcing a failure. [ 1672.141553][ T1327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1672.172357][ T1327] CPU: 0 PID: 1327 Comm: syz.4.7947 Not tainted syzkaller #0 [ 1672.179844][ T1327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1672.190044][ T1327] Call Trace: [ 1672.193367][ T1327] [ 1672.196401][ T1327] dump_stack_lvl+0x188/0x24e [ 1672.201172][ T1327] ? show_regs_print_info+0x12/0x12 [ 1672.206445][ T1327] ? load_image+0x410/0x410 [ 1672.211111][ T1327] ? __lock_acquire+0x7c40/0x7c40 [ 1672.216327][ T1327] should_fail_ex+0x390/0x4c0 [ 1672.221079][ T1327] _copy_from_user+0x2c/0x170 [ 1672.225812][ T1327] bpf_test_init+0xde/0x140 [ 1672.230381][ T1327] bpf_prog_test_run_xdp+0x488/0xf80 [ 1672.235726][ T1327] ? __lock_acquire+0x7c40/0x7c40 [ 1672.240863][ T1327] ? dev_put+0x80/0x80 [ 1672.245095][ T1327] ? dev_put+0x80/0x80 [ 1672.249233][ T1327] bpf_prog_test_run+0x31c/0x390 [ 1672.254331][ T1327] __sys_bpf+0x62b/0x780 [ 1672.258667][ T1327] ? bpf_link_show_fdinfo+0x380/0x380 [ 1672.264225][ T1327] ? lock_chain_count+0x20/0x20 [ 1672.269323][ T1327] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1672.275541][ T1327] __x64_sys_bpf+0x78/0x90 [ 1672.280062][ T1327] do_syscall_64+0x4c/0xa0 [ 1672.284631][ T1327] ? clear_bhb_loop+0x60/0xb0 [ 1672.289427][ T1327] ? clear_bhb_loop+0x60/0xb0 [ 1672.294165][ T1327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1672.300112][ T1327] RIP: 0033:0x7f292fd9e0d9 [ 1672.304608][ T1327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.324362][ T1327] RSP: 002b:00007f2930ba5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1672.332880][ T1327] RAX: ffffffffffffffda RBX: 00007f2930025fa0 RCX: 00007f292fd9e0d9 [ 1672.340910][ T1327] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1672.348942][ T1327] RBP: 00007f2930ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 1672.356969][ T1327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.365105][ T1327] R13: 00007f2930026038 R14: 00007f2930025fa0 R15: 00007ffcaadc95a8 [ 1672.373148][ T1327] [ 1672.387039][ T1336] netlink: 'syz.3.7948': attribute type 15 has an invalid length. [ 1672.395507][ T1336] netlink: 'syz.3.7948': attribute type 7 has an invalid length. [ 1674.083078][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.089801][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.425596][T13551] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1675.433433][T13551] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1675.477222][ T1350] delete_channel: no stack [ 1675.648620][ T1352] netlink: 'syz.4.7953': attribute type 21 has an invalid length. [ 1675.690213][ T1352] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.7953'. [ 1675.791455][ T1357] netlink: 'syz.2.7955': attribute type 1 has an invalid length. [ 1675.800346][ T1357] netlink: 14690 bytes leftover after parsing attributes in process `syz.2.7955'. [ 1675.833944][ T1363] netlink: 'syz.1.7957': attribute type 11 has an invalid length. [ 1675.852574][ T1363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7957'. [ 1676.022377][ T1370] netlink: 'syz.1.7962': attribute type 16 has an invalid length. [ 1676.059991][ T1370] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7962'. [ 1676.221994][ T1374] netlink: 'syz.4.7963': attribute type 10 has an invalid length. [ 1676.300681][ T1376] FAULT_INJECTION: forcing a failure. [ 1676.300681][ T1376] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.330054][ T1376] CPU: 0 PID: 1376 Comm: syz.2.7964 Not tainted syzkaller #0 [ 1676.337533][ T1376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1676.347840][ T1376] Call Trace: [ 1676.351178][ T1376] [ 1676.354268][ T1376] dump_stack_lvl+0x188/0x24e [ 1676.359036][ T1376] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1676.365269][ T1376] ? show_regs_print_info+0x12/0x12 [ 1676.370560][ T1376] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1676.376795][ T1376] ? dump_stack+0x5/0x12 [ 1676.381286][ T1376] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 1676.386845][ T1376] should_fail_ex+0x390/0x4c0 [ 1676.391606][ T1376] should_failslab+0x5/0x20 [ 1676.396166][ T1376] slab_pre_alloc_hook+0x59/0x300 [ 1676.401352][ T1376] ? kvmalloc_node+0x6c/0x180 [ 1676.406407][ T1376] __kmem_cache_alloc_node+0x4f/0x270 [ 1676.411887][ T1376] ? kvmalloc_node+0x6c/0x180 [ 1676.416721][ T1376] __kmalloc_node+0xa2/0x240 [ 1676.421399][ T1376] kvmalloc_node+0x6c/0x180 [ 1676.425989][ T1376] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1676.431617][ T1376] ? 0xffffffffa0004440 [ 1676.435937][ T1376] ? text_poke_copy+0x7b/0x90 [ 1676.440772][ T1376] ? 0xffffffffa0004440 [ 1676.444988][ T1376] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1676.451068][ T1376] ? xdp_convert_md_to_buff+0x330/0x330 [ 1676.456864][ T1376] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1676.463430][ T1376] ? bpf_prog_test_run_xdp+0x6bd/0xf80 [ 1676.469001][ T1376] bpf_prog_test_run_xdp+0x757/0xf80 [ 1676.474429][ T1376] ? __lock_acquire+0x7c40/0x7c40 [ 1676.479610][ T1376] ? dev_put+0x80/0x80 [ 1676.483755][ T1376] ? dev_put+0x80/0x80 [ 1676.487985][ T1376] bpf_prog_test_run+0x31c/0x390 [ 1676.492987][ T1376] __sys_bpf+0x62b/0x780 [ 1676.497293][ T1376] ? bpf_link_show_fdinfo+0x380/0x380 [ 1676.502734][ T1376] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1676.509049][ T1376] __x64_sys_bpf+0x78/0x90 [ 1676.513536][ T1376] do_syscall_64+0x4c/0xa0 [ 1676.518047][ T1376] ? clear_bhb_loop+0x60/0xb0 [ 1676.522799][ T1376] ? clear_bhb_loop+0x60/0xb0 [ 1676.527539][ T1376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1676.533484][ T1376] RIP: 0033:0x7f5e00b9e0d9 [ 1676.537955][ T1376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.557638][ T1376] RSP: 002b:00007f5e01a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1676.566289][ T1376] RAX: ffffffffffffffda RBX: 00007f5e00e25fa0 RCX: 00007f5e00b9e0d9 [ 1676.574493][ T1376] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1676.582787][ T1376] RBP: 00007f5e01a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.590808][ T1376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.598821][ T1376] R13: 00007f5e00e26038 R14: 00007f5e00e25fa0 R15: 00007fff065a2568 [ 1676.607038][ T1376] [ 1677.027869][ T1387] netlink: 'syz.0.7968': attribute type 2 has an invalid length. [ 1677.056744][ T1387] netlink: 'syz.0.7968': attribute type 8 has an invalid length. [ 1677.077735][ T1387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7968'. [ 1677.428637][ T1408] netlink: 'syz.0.7974': attribute type 1 has an invalid length. [ 1677.448806][ T1408] netlink: 14690 bytes leftover after parsing attributes in process `syz.0.7974'. [ 1677.590888][ T1417] FAULT_INJECTION: forcing a failure. [ 1677.590888][ T1417] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.648784][ T1417] CPU: 1 PID: 1417 Comm: syz.1.7977 Not tainted syzkaller #0 [ 1677.656456][ T1417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1677.666743][ T1417] Call Trace: [ 1677.670083][ T1417] [ 1677.673237][ T1417] dump_stack_lvl+0x188/0x24e [ 1677.677981][ T1417] ? show_regs_print_info+0x12/0x12 [ 1677.683242][ T1417] ? load_image+0x410/0x410 [ 1677.687794][ T1417] ? __might_sleep+0xd0/0xd0 [ 1677.692430][ T1417] ? __lock_acquire+0x7c40/0x7c40 [ 1677.697519][ T1417] should_fail_ex+0x390/0x4c0 [ 1677.702275][ T1417] should_failslab+0x5/0x20 [ 1677.706919][ T1417] slab_pre_alloc_hook+0x59/0x300 [ 1677.712014][ T1417] ? kvmalloc_node+0x6c/0x180 [ 1677.716775][ T1417] __kmem_cache_alloc_node+0x4f/0x270 [ 1677.722228][ T1417] ? kvmalloc_node+0x6c/0x180 [ 1677.726958][ T1417] __kmalloc_node+0xa2/0x240 [ 1677.731619][ T1417] kvmalloc_node+0x6c/0x180 [ 1677.736281][ T1417] bpf_test_run_xdp_live+0x206/0x1a90 [ 1677.741731][ T1417] ? 0xffffffffa0004440 [ 1677.745941][ T1417] ? text_poke_copy+0x7b/0x90 [ 1677.750677][ T1417] ? 0xffffffffa0004440 [ 1677.754948][ T1417] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1677.761069][ T1417] ? xdp_convert_md_to_buff+0x330/0x330 [ 1677.767050][ T1417] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1677.773777][ T1417] ? bpf_test_init+0x119/0x140 [ 1677.778835][ T1417] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1677.784352][ T1417] bpf_prog_test_run_xdp+0x757/0xf80 [ 1677.789718][ T1417] ? __lock_acquire+0x7c40/0x7c40 [ 1677.794798][ T1417] ? dev_put+0x80/0x80 [ 1677.798927][ T1417] ? dev_put+0x80/0x80 [ 1677.803287][ T1417] bpf_prog_test_run+0x31c/0x390 [ 1677.808363][ T1417] __sys_bpf+0x62b/0x780 [ 1677.812663][ T1417] ? bpf_link_show_fdinfo+0x380/0x380 [ 1677.818283][ T1417] ? lock_chain_count+0x20/0x20 [ 1677.823182][ T1417] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1677.829291][ T1417] __x64_sys_bpf+0x78/0x90 [ 1677.833865][ T1417] do_syscall_64+0x4c/0xa0 [ 1677.838422][ T1417] ? clear_bhb_loop+0x60/0xb0 [ 1677.843418][ T1417] ? clear_bhb_loop+0x60/0xb0 [ 1677.848135][ T1417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.854097][ T1417] RIP: 0033:0x7f47ca39e0d9 [ 1677.858567][ T1417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.878260][ T1417] RSP: 002b:00007f47c85f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1677.886736][ T1417] RAX: ffffffffffffffda RBX: 00007f47ca625fa0 RCX: 00007f47ca39e0d9 [ 1677.894753][ T1417] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1677.902790][ T1417] RBP: 00007f47c85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.911232][ T1417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.919474][ T1417] R13: 00007f47ca626038 R14: 00007f47ca625fa0 R15: 00007ffc19f48758 [ 1677.927500][ T1417] [ 1678.840096][T13551] Bluetooth: hci2: ISO packet for unknown connection handle 156 [ 1679.030745][ T1460] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7990'. [ 1680.138240][ T1467] netlink: 'syz.2.7992': attribute type 2 has an invalid length. [ 1680.146807][ T1467] netlink: 'syz.2.7992': attribute type 1 has an invalid length. [ 1680.158366][ T1467] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7992'. [ 1680.816499][ T1471] FAULT_INJECTION: forcing a failure. [ 1680.816499][ T1471] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.831002][ T1471] CPU: 0 PID: 1471 Comm: syz.4.7994 Not tainted syzkaller #0 [ 1680.838964][ T1471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1680.849078][ T1471] Call Trace: [ 1680.852482][ T1471] [ 1680.855442][ T1471] dump_stack_lvl+0x188/0x24e [ 1680.860157][ T1471] ? show_regs_print_info+0x12/0x12 [ 1680.865655][ T1471] ? load_image+0x410/0x410 [ 1680.870197][ T1471] ? __might_sleep+0xd0/0xd0 [ 1680.874821][ T1471] ? __lock_acquire+0x7c40/0x7c40 [ 1680.879883][ T1471] should_fail_ex+0x390/0x4c0 [ 1680.884598][ T1471] should_failslab+0x5/0x20 [ 1680.889225][ T1471] slab_pre_alloc_hook+0x59/0x300 [ 1680.894324][ T1471] ? page_pool_create+0x6d/0x5c0 [ 1680.899485][ T1471] __kmem_cache_alloc_node+0x4f/0x270 [ 1680.904920][ T1471] ? page_pool_create+0x6d/0x5c0 [ 1680.910072][ T1471] kmalloc_node_trace+0x22/0xe0 [ 1680.914966][ T1471] page_pool_create+0x6d/0x5c0 [ 1680.919764][ T1471] bpf_test_run_xdp_live+0x220/0x1a90 [ 1680.925183][ T1471] ? 0xffffffffa0004440 [ 1680.929368][ T1471] ? bpf_dispatcher_change_prog+0xc90/0xf10 [ 1680.935330][ T1471] ? xdp_convert_md_to_buff+0x330/0x330 [ 1680.940937][ T1471] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1680.947409][ T1471] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1680.952914][ T1471] bpf_prog_test_run_xdp+0x757/0xf80 [ 1680.958308][ T1471] ? __lock_acquire+0x7c40/0x7c40 [ 1680.963413][ T1471] ? dev_put+0x80/0x80 [ 1680.967642][ T1471] ? dev_put+0x80/0x80 [ 1680.971866][ T1471] bpf_prog_test_run+0x31c/0x390 [ 1680.976947][ T1471] __sys_bpf+0x62b/0x780 [ 1680.981365][ T1471] ? bpf_link_show_fdinfo+0x380/0x380 [ 1680.986789][ T1471] ? lock_chain_count+0x20/0x20 [ 1680.991701][ T1471] __x64_sys_bpf+0x78/0x90 [ 1680.996203][ T1471] do_syscall_64+0x4c/0xa0 [ 1681.000681][ T1471] ? clear_bhb_loop+0x60/0xb0 [ 1681.005603][ T1471] ? clear_bhb_loop+0x60/0xb0 [ 1681.010381][ T1471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1681.016375][ T1471] RIP: 0033:0x7f292fd9e0d9 [ 1681.020848][ T1471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1681.040886][ T1471] RSP: 002b:00007f2930b84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1681.049541][ T1471] RAX: ffffffffffffffda RBX: 00007f2930026090 RCX: 00007f292fd9e0d9 [ 1681.057572][ T1471] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1681.065765][ T1471] RBP: 00007f2930b84090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.074002][ T1471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.082026][ T1471] R13: 00007f2930026128 R14: 00007f2930026090 R15: 00007ffcaadc95a8 [ 1681.090608][ T1471] [ 1681.424124][ T1484] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7999'. [ 1681.649791][ T1493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8001'. [ 1682.464319][ T1502] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8003'. [ 1682.845309][ T1500] netlink: 'syz.2.8003': attribute type 21 has an invalid length. [ 1682.867297][ T1500] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8003'. [ 1683.932301][ T1513] netlink: 'syz.4.8007': attribute type 4 has an invalid length. [ 1683.945156][ T1515] netlink: 'syz.3.8008': attribute type 3 has an invalid length. [ 1683.957398][ T1515] netlink: 'syz.3.8008': attribute type 4 has an invalid length. [ 1683.971753][ T1515] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.8008'. [ 1684.636139][ T1530] netlink: 'syz.3.8011': attribute type 10 has an invalid length. [ 1685.583366][ T1544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8016'. [ 1685.639846][ T1544] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8016'. [ 1685.661347][ T1546] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8016'. [ 1685.736425][ T1544] netlink: 'syz.0.8016': attribute type 13 has an invalid length. [ 1685.779616][ T1544] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8016'. [ 1685.806950][ T1544] syz_tun: refused to change device tx_queue_len [ 1685.862311][ T1544] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1686.249274][ T1553] netlink: 'syz.2.8019': attribute type 41 has an invalid length. [ 1686.322994][ T1562] netlink: 'syz.3.8021': attribute type 10 has an invalid length. [ 1686.710955][ T1573] netlink: 'syz.1.8025': attribute type 29 has an invalid length. [ 1686.719353][ T1573] netlink: 'syz.1.8025': attribute type 29 has an invalid length. [ 1686.794831][ T1578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8026'. [ 1686.918013][ T1580] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.8027'. [ 1687.028991][ T1592] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.8030'. [ 1687.084224][ T1594] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8031'. [ 1688.284978][ T1614] validate_nla: 3 callbacks suppressed [ 1688.284997][ T1614] netlink: 'syz.0.8033': attribute type 21 has an invalid length. [ 1688.307600][ T1614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8033'. [ 1688.317342][ T1614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8033'. [ 1688.474010][ T1622] netlink: 'syz.1.8037': attribute type 10 has an invalid length. [ 1688.537221][ T1621] netlink: 'syz.3.8038': attribute type 1 has an invalid length. [ 1688.582531][ T1621] netlink: 'syz.3.8038': attribute type 4 has an invalid length. [ 1688.618761][ T1624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1688.629212][ T1621] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8038'. [ 1688.645461][ T1624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1688.661688][ T1624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8039'. [ 1688.735932][ T1629] netlink: 'syz.2.8041': attribute type 3 has an invalid length. [ 1688.745732][ T1624] netlink: 'syz.4.8039': attribute type 13 has an invalid length. [ 1688.863800][ T1624] syz_tun: refused to change device tx_queue_len [ 1688.934288][ T1624] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1689.182756][ T1636] netlink: zone id is out of range [ 1689.227751][ T1636] netlink: zone id is out of range [ 1689.265369][ T1636] netlink: zone id is out of range [ 1689.280405][ T1636] netlink: zone id is out of range [ 1689.290951][ T1636] netlink: zone id is out of range [ 1689.313765][ T1636] netlink: zone id is out of range [ 1689.380989][ T1636] netlink: zone id is out of range [ 1689.418253][ T1636] netlink: zone id is out of range [ 1689.734825][ T1643] netlink: 'syz.4.8044': attribute type 3 has an invalid length. [ 1689.965144][ T1635] netlink: 'syz.0.8043': attribute type 1 has an invalid length. [ 1689.995324][ T1640] netlink: 'syz.0.8043': attribute type 10 has an invalid length. [ 1690.542479][ T1661] netlink: 'syz.0.8052': attribute type 1 has an invalid length. [ 1691.109519][ T1667] : port 1(ip6gretap0) entered blocking state [ 1691.116107][ T1667] : port 1(ip6gretap0) entered disabled state [ 1691.151089][ T1667] device ip6gretap0 entered promiscuous mode [ 1691.733000][ T1688] device bridge_slave_1 left promiscuous mode [ 1691.750655][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.867673][ T1688] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1692.390189][ T1710] __nla_validate_parse: 12 callbacks suppressed [ 1692.390208][ T1710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8064'. [ 1692.478720][ T1709] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1693.103336][T13551] Bluetooth: hci5: unexpected subevent 0x03 length: 150 > 9 [ 1693.877567][ T1722] validate_nla: 7 callbacks suppressed [ 1693.877586][ T1722] netlink: 'syz.4.8069': attribute type 10 has an invalid length. [ 1694.536968][ T1725] device syzkaller0 entered promiscuous mode [ 1694.633519][ T1749] netlink: 'syz.1.8077': attribute type 21 has an invalid length. [ 1694.661203][ T1749] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8077'. [ 1699.373535][ T1754] netlink: 'syz.0.8078': attribute type 1 has an invalid length. [ 1699.381640][ T1754] netlink: 'syz.0.8078': attribute type 4 has an invalid length. [ 1699.391631][ T1754] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8078'. [ 1700.719042][ T1801] device syzkaller0 entered promiscuous mode [ 1701.005990][ T1805] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1701.024517][ T1805] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1701.036408][ T1805] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8091'. [ 1705.870881][ T1806] netlink: 'syz.0.8091': attribute type 21 has an invalid length. [ 1705.879202][ T1824] netlink: 'syz.2.8096': attribute type 1 has an invalid length. [ 1705.890898][ T1824] netlink: 'syz.2.8096': attribute type 4 has an invalid length. [ 1705.898830][ T1824] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8096'. [ 1706.123890][ T1842] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8101'. [ 1706.497148][ T1864] netlink: 'syz.2.8107': attribute type 1 has an invalid length. [ 1706.534551][ T1867] netlink: 'syz.3.8109': attribute type 3 has an invalid length. [ 1706.542561][ T1867] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8109'. [ 1706.558383][ T1864] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.8107'. [ 1706.644759][ T1864] device pim6reg1 entered promiscuous mode [ 1706.821604][ T1877] netlink: 'syz.0.8112': attribute type 2 has an invalid length. [ 1706.835168][ T1877] netlink: 'syz.0.8112': attribute type 1 has an invalid length. [ 1706.845419][ T1877] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8112'. [ 1707.459787][ T1884] netlink: 'syz.0.8113': attribute type 1 has an invalid length. [ 1707.468099][ T1884] netlink: 'syz.0.8113': attribute type 4 has an invalid length. [ 1707.517159][ T1884] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.8113'. [ 1707.527525][ T1888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8114'. [ 1707.542535][ T1888] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8114'. [ 1707.765049][ T1902] netlink: 64935 bytes leftover after parsing attributes in process `syz.4.8117'. [ 1711.396779][ T1939] netlink: 'syz.3.8128': attribute type 1 has an invalid length. [ 1711.411510][ T1939] netlink: 'syz.3.8128': attribute type 4 has an invalid length. [ 1711.424375][ T1939] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1711.519744][ T1944] netlink: 'syz.4.8130': attribute type 3 has an invalid length. [ 1711.553269][ T1944] netlink: 'syz.4.8130': attribute type 1 has an invalid length. [ 1711.609900][ T1944] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.8130'. [ 1711.649182][ T1949] netlink: 'syz.1.8129': attribute type 2 has an invalid length. [ 1711.672434][ T1949] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.8129'. [ 1711.806458][ T1957] netlink: 'syz.2.8133': attribute type 3 has an invalid length. [ 1711.825483][ T1957] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.8133'. [ 1714.648644][ T1982] netlink: 'syz.1.8141': attribute type 11 has an invalid length. [ 1714.924813][ T1988] netlink: 'syz.2.8143': attribute type 9 has an invalid length. [ 1714.933074][ T1988] netlink: 64347 bytes leftover after parsing attributes in process `syz.2.8143'. [ 1715.774920][ T2006] netlink: 'syz.1.8147': attribute type 1 has an invalid length. [ 1715.783543][ T2006] netlink: 'syz.1.8147': attribute type 4 has an invalid length. [ 1715.792211][ T2006] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8147'. [ 1716.419039][ T2034] validate_nla: 1 callbacks suppressed [ 1716.419058][ T2034] netlink: 'syz.4.8154': attribute type 2 has an invalid length. [ 1716.493165][ T2034] device 0 entered promiscuous mode [ 1716.622723][ T2022] netlink: 'syz.0.8152': attribute type 41 has an invalid length. [ 1717.337039][ T2041] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8158'. [ 1717.431631][ T2049] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.8159'. [ 1721.288823][ T2071] netlink: 'syz.1.8164': attribute type 1 has an invalid length. [ 1721.408128][ T2071] netlink: 'syz.1.8164': attribute type 4 has an invalid length. [ 1721.530625][ T2071] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8164'. [ 1723.184306][ T2089] netlink: 'syz.1.8169': attribute type 10 has an invalid length. [ 1723.214883][ T2089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8169'. [ 1723.294476][ T2094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8170'. [ 1723.319534][ T2094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8170'. [ 1723.368584][ T2094] netlink: 33 bytes leftover after parsing attributes in process `syz.0.8170'. [ 1723.402575][ T2092] netlink: 'syz.3.8171': attribute type 10 has an invalid length. [ 1724.003248][ T2120] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.8178'. [ 1724.058380][ T2121] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.8178'. [ 1724.259112][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1724.518044][ T2131] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8181'. [ 1724.558311][ T2131] syz.3.8181[2131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1724.558440][ T2131] syz.3.8181[2131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1724.782540][ T2141] netlink: 'syz.4.8184': attribute type 16 has an invalid length. [ 1724.866408][ T2141] netlink: 'syz.4.8184': attribute type 25 has an invalid length. [ 1724.907110][ T2141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8184'. [ 1724.934829][ T2144] netlink: 'syz.3.8185': attribute type 27 has an invalid length. [ 1724.954922][ T2144] netlink: 'syz.3.8185': attribute type 25 has an invalid length. [ 1724.973814][ T2145] netlink: 'syz.3.8185': attribute type 27 has an invalid length. [ 1724.996934][ T2145] netlink: 'syz.3.8185': attribute type 25 has an invalid length. [ 1725.681825][ T2158] netlink: 'syz.0.8189': attribute type 5 has an invalid length. [ 1726.047047][ T2167] netlink: 'syz.3.8192': attribute type 1 has an invalid length. [ 1726.069945][ T2167] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8192'. [ 1726.453522][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1727.602681][ T2204] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8206'. [ 1727.965422][ T2217] tipc: Started in network mode [ 1727.980716][T13551] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1728.002998][ T2217] tipc: Node identity 9215a268, cluster identity 4711 [ 1728.010256][ T2217] tipc: Node number set to 2450891368 [ 1729.360081][ T2228] validate_nla: 3 callbacks suppressed [ 1729.360102][ T2228] netlink: 'syz.4.8208': attribute type 16 has an invalid length. [ 1729.385015][ T2228] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8208'. [ 1729.495507][ T2234] device syzkaller0 entered promiscuous mode [ 1733.125238][ T2263] netlink: 'syz.4.8221': attribute type 1 has an invalid length. [ 1733.137458][ T2263] netlink: 'syz.4.8221': attribute type 4 has an invalid length. [ 1733.148135][ T2263] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8221'. [ 1733.337658][ T2266] netlink: 92068 bytes leftover after parsing attributes in process `syz.3.8222'. [ 1733.386420][ T2266] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1733.468215][T13551] Bluetooth: hci5: unexpected subevent 0x1a length: 150 > 6 [ 1733.600833][ T2267] netlink: 92068 bytes leftover after parsing attributes in process `syz.3.8222'. [ 1733.645828][ T2267] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1733.663509][ T2267] CPU: 1 PID: 2267 Comm: syz.3.8222 Not tainted syzkaller #0 [ 1733.671094][ T2267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1733.681213][ T2267] Call Trace: [ 1733.684555][ T2267] [ 1733.687532][ T2267] dump_stack_lvl+0x188/0x24e [ 1733.692370][ T2267] ? show_regs_print_info+0x12/0x12 [ 1733.697759][ T2267] ? load_image+0x410/0x410 [ 1733.702341][ T2267] sysfs_warn_dup+0x8a/0xa0 [ 1733.706974][ T2267] sysfs_do_create_link_sd+0xc0/0x110 [ 1733.712436][ T2267] device_add+0x83b/0x1050 [ 1733.716949][ T2267] wiphy_register+0x1d8b/0x2aa0 [ 1733.721891][ T2267] ? cfg80211_event_work+0x40/0x40 [ 1733.727088][ T2267] ? minstrel_ht_alloc+0x894/0xa20 [ 1733.732276][ T2267] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1733.738422][ T2267] ieee80211_register_hw+0x2d48/0x39f0 [ 1733.743972][ T2267] ? ieee80211_register_hw+0xee1/0x39f0 [ 1733.749603][ T2267] ? ieee80211_register_hw+0xee1/0x39f0 [ 1733.756100][ T2267] ? ieee80211_tasklet_handler+0x20/0x20 [ 1733.761827][ T2267] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1733.767971][ T2267] ? __debug_object_init+0xed/0x440 [ 1733.773291][ T2267] ? memset+0x1e/0x40 [ 1733.777364][ T2267] ? __hrtimer_init+0x189/0x270 [ 1733.782271][ T2267] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1733.788165][ T2267] ? memcpy+0x3c/0x60 [ 1733.792216][ T2267] hwsim_new_radio_nl+0xab7/0xc90 [ 1733.797339][ T2267] genl_family_rcv_msg_doit+0x22f/0x350 [ 1733.802940][ T2267] ? end_current_label_crit_section+0x170/0x170 [ 1733.809430][ T2267] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1733.815440][ T2267] ? bpf_lsm_capable+0x5/0x10 [ 1733.820191][ T2267] ? security_capable+0x85/0xb0 [ 1733.825121][ T2267] genl_rcv_msg+0x601/0x790 [ 1733.829713][ T2267] ? genl_bind+0x360/0x360 [ 1733.834190][ T2267] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1733.840734][ T2267] netlink_rcv_skb+0x1ef/0x440 [ 1733.845671][ T2267] ? genl_bind+0x360/0x360 [ 1733.850169][ T2267] ? netlink_ack+0x1160/0x1160 [ 1733.855010][ T2267] ? down_read+0x1a8/0x2d0 [ 1733.859576][ T2267] genl_rcv+0x24/0x40 [ 1733.863612][ T2267] netlink_unicast+0x7ad/0x920 [ 1733.868446][ T2267] netlink_sendmsg+0x8ad/0xbd0 [ 1733.873306][ T2267] ? netlink_getsockopt+0x550/0x550 [ 1733.878564][ T2267] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1733.884276][ T2267] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1733.889750][ T2267] ? security_socket_sendmsg+0x7c/0xa0 [ 1733.895283][ T2267] ? netlink_getsockopt+0x550/0x550 [ 1733.900731][ T2267] ____sys_sendmsg+0x5ed/0x9a0 [ 1733.905756][ T2267] ? __sys_sendmsg_sock+0x30/0x30 [ 1733.910846][ T2267] ? __import_iovec+0x306/0x510 [ 1733.915878][ T2267] ? import_iovec+0x6f/0xa0 [ 1733.920438][ T2267] ___sys_sendmsg+0x2a2/0x360 [ 1733.925307][ T2267] ? __sys_sendmsg+0x2a0/0x2a0 [ 1733.930181][ T2267] __se_sys_sendmsg+0x1c3/0x2b0 [ 1733.935085][ T2267] ? perf_trace_preemptirq_template+0x268/0x320 [ 1733.941410][ T2267] ? __x64_sys_sendmsg+0x80/0x80 [ 1733.946437][ T2267] ? lockdep_hardirqs_on+0x94/0x140 [ 1733.951704][ T2267] do_syscall_64+0x4c/0xa0 [ 1733.956317][ T2267] ? clear_bhb_loop+0x60/0xb0 [ 1733.961078][ T2267] ? clear_bhb_loop+0x60/0xb0 [ 1733.965994][ T2267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1733.971976][ T2267] RIP: 0033:0x7f493b59e0d9 [ 1733.976456][ T2267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.996317][ T2267] RSP: 002b:00007f493c4da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.004793][ T2267] RAX: ffffffffffffffda RBX: 00007f493b826090 RCX: 00007f493b59e0d9 [ 1734.012802][ T2267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011 [ 1734.021178][ T2267] RBP: 00007f493b635024 R08: 0000000000000000 R09: 0000000000000000 [ 1734.029225][ T2267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.037248][ T2267] R13: 00007f493b826128 R14: 00007f493b826090 R15: 00007ffc49ab59d8 [ 1734.045379][ T2267] [ 1735.478699][ T2302] netlink: 'syz.2.8229': attribute type 3 has an invalid length. [ 1735.522066][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.528536][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.612167][ T2302] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8229'. [ 1736.502081][ T2315] netlink: 'syz.4.8235': attribute type 1 has an invalid length. [ 1736.523255][ T2315] netlink: 'syz.4.8235': attribute type 4 has an invalid length. [ 1736.577407][ T2315] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8235'. [ 1736.635780][ T2317] device syzkaller0 entered promiscuous mode [ 1736.891853][T13551] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1737.004382][ T2334] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8240'. [ 1737.049655][ T2334] net_ratelimit: 3662 callbacks suppressed [ 1737.049676][ T2334] openvswitch: netlink: Message has 6 unknown bytes. [ 1737.293196][ T2344] netlink: 'syz.3.8243': attribute type 3 has an invalid length. [ 1737.325187][ T2344] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.8243'. [ 1739.475880][ T2368] netlink: 'syz.2.8249': attribute type 10 has an invalid length. [ 1739.500208][ T2368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8249'. [ 1739.834627][ T2368] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1739.889741][ T2368] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.055441][ T2368] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1740.616457][ T2373] netlink: 'syz.2.8250': attribute type 1 has an invalid length. [ 1740.679181][ T2373] netlink: 'syz.2.8250': attribute type 4 has an invalid length. [ 1740.721022][ T2373] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8250'. [ 1740.815944][T13551] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1740.823549][T13551] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1740.857380][ T2384] netlink: 'syz.4.8254': attribute type 10 has an invalid length. [ 1740.875704][ T2384] bond0: (slave netdevsim0): Releasing backup interface [ 1741.078482][ T2384] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8254'. [ 1741.094028][ T2394] netlink: 'syz.2.8257': attribute type 1 has an invalid length. [ 1741.136148][T24765] tipc: Subscription rejected, illegal request [ 1741.147332][ T2393] netlink: 'syz.2.8257': attribute type 21 has an invalid length. [ 1741.193942][ T2393] netlink: 'syz.2.8257': attribute type 1 has an invalid length. [ 1741.213261][ T2393] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8257'. [ 1741.910534][ T2410] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.8261'. [ 1741.939347][ T2408] netlink: 'syz.3.8258': attribute type 21 has an invalid length. [ 1742.021242][ T2408] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8258'. [ 1742.126202][ T2408] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8258'. [ 1743.142096][ T2440] netlink: 'syz.3.8269': attribute type 1 has an invalid length. [ 1743.193909][ T2440] netlink: 'syz.3.8269': attribute type 4 has an invalid length. [ 1743.204117][T13551] Bluetooth: hci5: unexpected subevent 0x19 length: 150 > 28 [ 1743.211744][T13551] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 1743.229692][ T2440] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8269'. [ 1743.357469][ T2446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8270'. [ 1743.928649][ T2454] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.8273'. [ 1744.838537][ T2487] netlink: 'syz.3.8282': attribute type 1 has an invalid length. [ 1744.898632][ T2487] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8282'. [ 1748.410643][ T2517] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8288'. [ 1748.950739][ T2522] validate_nla: 1 callbacks suppressed [ 1748.950808][ T2522] netlink: 'syz.1.8289': attribute type 21 has an invalid length. [ 1749.440002][ T2537] netlink: 'syz.3.8294': attribute type 1 has an invalid length. [ 1749.469294][ T2537] netlink: 'syz.3.8294': attribute type 4 has an invalid length. [ 1749.511231][ T2537] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8294'. [ 1752.992334][ T2566] netlink: 'syz.0.8301': attribute type 6 has an invalid length. [ 1753.043924][ T2566] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8301'. [ 1753.339682][ T2582] netlink: 'syz.0.8305': attribute type 21 has an invalid length. [ 1753.373972][ T2582] IPv6: pim6reg1: Disabled Multicast RS [ 1753.425283][ T2586] syz.2.8306[2586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1753.426271][ T2586] syz.2.8306[2586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1753.455662][ T2591] netlink: 'syz.3.8308': attribute type 1 has an invalid length. [ 1753.484456][ T2591] netlink: 'syz.3.8308': attribute type 4 has an invalid length. [ 1753.494143][ T2591] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8308'. [ 1753.752127][ T2606] netlink: 'syz.4.8310': attribute type 21 has an invalid length. [ 1753.967213][ T2611] netlink: 'syz.0.8311': attribute type 21 has an invalid length. [ 1754.006754][ T2611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8311'. [ 1755.225040][ T2655] netlink: 'syz.1.8322': attribute type 1 has an invalid length. [ 1755.259811][ T2655] netlink: 'syz.1.8322': attribute type 4 has an invalid length. [ 1755.314102][ T2655] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8322'. [ 1755.644667][ T2666] netlink: 'syz.0.8325': attribute type 10 has an invalid length. [ 1755.683533][ T2666] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8325'. [ 1755.753768][ T2666] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1756.046813][ T2689] netlink: 'syz.3.8329': attribute type 16 has an invalid length. [ 1756.084781][ T2689] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8329'. [ 1758.412890][ T2697] netlink: 'syz.4.8333': attribute type 1 has an invalid length. [ 1758.496220][ T2697] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.8333'. [ 1758.538596][ T2707] netlink: 'syz.1.8336': attribute type 1 has an invalid length. [ 1758.567660][ T2707] netlink: 'syz.1.8336': attribute type 4 has an invalid length. [ 1758.659692][ T2707] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8336'. [ 1761.329213][ T2763] netlink: 'syz.3.8350': attribute type 1 has an invalid length. [ 1761.337680][ T2763] netlink: 'syz.3.8350': attribute type 4 has an invalid length. [ 1761.345928][ T2763] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8350'. [ 1761.619749][ T2768] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.8352'. [ 1761.920288][ T2786] netlink: 'syz.0.8356': attribute type 4 has an invalid length. [ 1761.928829][ T2786] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8356'. [ 1761.973842][ T2788] netlink: 'syz.3.8355': attribute type 1 has an invalid length. [ 1762.028825][ T2788] netlink: 'syz.3.8355': attribute type 3 has an invalid length. [ 1762.037847][ T2788] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8355'. [ 1762.169986][ T2791] sctp: [Deprecated]: syz.4.8359 (pid 2791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1762.169986][ T2791] Use struct sctp_sack_info instead [ 1762.297683][ T2802] tap0: tun_chr_ioctl cmd 1074025673 [ 1762.349277][ T2791] tap0: tun_chr_ioctl cmd 1074025677 [ 1762.381236][ T2791] tap0: linktype set to 773 [ 1762.476334][ T2812] netlink: 'syz.2.8364': attribute type 1 has an invalid length. [ 1762.495152][ T2812] netlink: 'syz.2.8364': attribute type 4 has an invalid length. [ 1762.503498][ T2812] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8364'. [ 1762.683593][T13551] Bluetooth: hci3: ISO packet for unknown connection handle 574 [ 1762.979601][ T2835] IPv6: Can't replace route, no match found [ 1763.008876][ T2823] ================================================================== [ 1763.017051][ T2823] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1763.025001][ T2823] Write of size 48 at addr ffff8880593fa890 by task syz.0.8366/2823 [ 1763.033129][ T2823] [ 1763.035506][ T2823] CPU: 1 PID: 2823 Comm: syz.0.8366 Not tainted syzkaller #0 [ 1763.042939][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1763.053133][ T2823] Call Trace: [ 1763.056458][ T2823] [ 1763.059433][ T2823] dump_stack_lvl+0x188/0x24e [ 1763.064267][ T2823] ? __lock_acquire+0x7c40/0x7c40 [ 1763.069410][ T2823] ? show_regs_print_info+0x12/0x12 [ 1763.074764][ T2823] ? load_image+0x410/0x410 [ 1763.079421][ T2823] ? __virt_addr_valid+0x467/0x540 [ 1763.084828][ T2823] ? __bpf_get_stackid+0x6c9/0x920 [ 1763.090007][ T2823] print_report+0xa8/0x210 [ 1763.094505][ T2823] kasan_report+0x10b/0x140 [ 1763.099252][ T2823] ? __bpf_get_stackid+0x6c9/0x920 [ 1763.104436][ T2823] kasan_check_range+0x235/0x290 [ 1763.109572][ T2823] ? __bpf_get_stackid+0x6c9/0x920 [ 1763.114791][ T2823] memcpy+0x3c/0x60 [ 1763.118663][ T2823] __bpf_get_stackid+0x6c9/0x920 [ 1763.123703][ T2823] bpf_get_stackid_pe+0x33f/0x400 [ 1763.128809][ T2823] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1763.134412][ T2823] bpf_overflow_handler+0x6d1/0x790 [ 1763.139680][ T2823] ? bpf_overflow_handler+0xd9/0x790 [ 1763.145031][ T2823] ? perf_swevent_overflow+0x230/0x230 [ 1763.150644][ T2823] ? ct_irq_exit_irqson+0x113/0x170 [ 1763.156074][ T2823] ? mark_lock+0x94/0x320 [ 1763.160475][ T2823] ? __perf_event_account_interrupt+0x187/0x280 [ 1763.166911][ T2823] __perf_event_overflow+0x457/0x630 [ 1763.172268][ T2823] perf_swevent_event+0x315/0x570 [ 1763.177364][ T2823] ? perf_tp_event+0xc10/0xc10 [ 1763.182199][ T2823] ? ___perf_sw_event+0x44c/0x6d0 [ 1763.187426][ T2823] ___perf_sw_event+0x498/0x6d0 [ 1763.192442][ T2823] ? ___perf_sw_event+0x184/0x6d0 [ 1763.197543][ T2823] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1763.204034][ T2823] ? mark_lock+0x94/0x320 [ 1763.208558][ T2823] ? mark_lock+0x94/0x320 [ 1763.212975][ T2823] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1763.219127][ T2823] ? lock_chain_count+0x20/0x20 [ 1763.224154][ T2823] __perf_sw_event+0x135/0x260 [ 1763.229125][ T2823] do_user_addr_fault+0x497/0xb20 [ 1763.234266][ T2823] ? trace_hardirqs_off_finish+0x86/0x180 [ 1763.240065][ T2823] exc_page_fault+0x60/0x100 [ 1763.244753][ T2823] ? __might_fault+0xa6/0x120 [ 1763.249492][ T2823] asm_exc_page_fault+0x22/0x30 [ 1763.254492][ T2823] RIP: 0010:__get_user_4+0x1c/0x30 [ 1763.259709][ T2823] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 1763.279457][ T2823] RSP: 0018:ffffc900037bfd98 EFLAGS: 00050206 [ 1763.285580][ T2823] RAX: 000000110e22fff6 RBX: ffff8880787e54c0 RCX: 66a6f81726c89300 [ 1763.293610][ T2823] RDX: ffffffffffffffff RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 1763.301732][ T2823] RBP: ffffc900037bfed8 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 1763.309848][ T2823] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 00000000c004743e [ 1763.318068][ T2823] R13: ffff8880787e5598 R14: ffff888043a02a00 R15: 1ffff11008740575 [ 1763.326103][ T2823] ppp_ioctl+0x530/0x1a40 [ 1763.330575][ T2823] ? ppp_poll+0x250/0x250 [ 1763.334931][ T2823] ? __fget_files+0x28/0x460 [ 1763.339597][ T2823] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1763.344756][ T2823] ? security_file_ioctl+0x7c/0xa0 [ 1763.349909][ T2823] ? ppp_poll+0x250/0x250 [ 1763.354380][ T2823] __se_sys_ioctl+0xfa/0x170 [ 1763.359085][ T2823] do_syscall_64+0x4c/0xa0 [ 1763.363544][ T2823] ? clear_bhb_loop+0x60/0xb0 [ 1763.368261][ T2823] ? clear_bhb_loop+0x60/0xb0 [ 1763.373093][ T2823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.379056][ T2823] RIP: 0033:0x7f1269d9e0d9 [ 1763.383593][ T2823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1763.403468][ T2823] RSP: 002b:00007f1267ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.411950][ T2823] RAX: ffffffffffffffda RBX: 00007f126a025fa0 RCX: 00007f1269d9e0d9 [ 1763.419971][ T2823] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000e [ 1763.427977][ T2823] RBP: 00007f1269e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1763.435985][ T2823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1763.443989][ T2823] R13: 00007f126a026038 R14: 00007f126a025fa0 R15: 00007ffc81dd5088 [ 1763.452042][ T2823] [ 1763.455083][ T2823] [ 1763.457424][ T2823] Allocated by task 2823: [ 1763.461792][ T2823] kasan_set_track+0x4b/0x70 [ 1763.466421][ T2823] __kasan_kmalloc+0x8e/0xa0 [ 1763.471049][ T2823] __kmalloc_node+0xb2/0x240 [ 1763.475718][ T2823] bpf_map_area_alloc+0x47/0xe0 [ 1763.480662][ T2823] prealloc_elems_and_freelist+0x86/0x1c0 [ 1763.486505][ T2823] stack_map_alloc+0x386/0x510 [ 1763.491302][ T2823] map_create+0x524/0xff0 [ 1763.495753][ T2823] __sys_bpf+0x38b/0x780 [ 1763.500120][ T2823] __x64_sys_bpf+0x78/0x90 [ 1763.504750][ T2823] do_syscall_64+0x4c/0xa0 [ 1763.509369][ T2823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.515305][ T2823] [ 1763.517659][ T2823] Last potentially related work creation: [ 1763.523423][ T2823] kasan_save_stack+0x3a/0x60 [ 1763.528147][ T2823] __kasan_record_aux_stack+0xb2/0xc0 [ 1763.533549][ T2823] call_rcu+0x14f/0x950 [ 1763.537739][ T2823] __nf_register_net_hook+0x787/0x910 [ 1763.543211][ T2823] nf_register_net_hook+0xae/0x190 [ 1763.548357][ T2823] nf_register_net_hooks+0x40/0x1a0 [ 1763.553588][ T2823] nf_ct_netns_do_get+0x3bc/0x5b0 [ 1763.558787][ T2823] nf_ct_netns_inet_get+0x1f/0x150 [ 1763.563930][ T2823] nf_conncount_init+0x123/0x380 [ 1763.569060][ T2823] ovs_ct_init+0x312/0x480 [ 1763.573574][ T2823] ovs_init_net+0x1e2/0x240 [ 1763.578130][ T2823] ops_init+0x360/0x5e0 [ 1763.582337][ T2823] setup_net+0x4f2/0xbd0 [ 1763.586695][ T2823] copy_net_ns+0x33e/0x5b0 [ 1763.591144][ T2823] create_new_namespaces+0x3ce/0x700 [ 1763.596532][ T2823] copy_namespaces+0x3ae/0x410 [ 1763.601322][ T2823] copy_process+0x19ef/0x40c0 [ 1763.606096][ T2823] kernel_clone+0x24b/0x900 [ 1763.610716][ T2823] __x64_sys_clone+0x1a7/0x220 [ 1763.615558][ T2823] do_syscall_64+0x4c/0xa0 [ 1763.620134][ T2823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1763.626257][ T2823] [ 1763.628605][ T2823] Second to last potentially related work creation: [ 1763.635657][ T2823] kasan_save_stack+0x3a/0x60 [ 1763.640427][ T2823] __kasan_record_aux_stack+0xb2/0xc0 [ 1763.645832][ T2823] call_rcu+0x14f/0x950 [ 1763.650118][ T2823] nf_unregister_net_hooks+0xc7/0x130 [ 1763.655581][ T2823] nf_defrag_ipv6_disable+0x91/0xe0 [ 1763.660911][ T2823] nf_ct_netns_put+0x371/0x510 [ 1763.665704][ T2823] nf_conncount_destroy+0x3d/0x150 [ 1763.670876][ T2823] ovs_ct_exit+0x98/0x200 [ 1763.675350][ T2823] ovs_exit_net+0xe9/0x7a0 [ 1763.679827][ T2823] cleanup_net+0x703/0xba0 [ 1763.684278][ T2823] process_one_work+0x8ab/0x1160 [ 1763.689325][ T2823] worker_thread+0xaf5/0x12a0 [ 1763.694141][ T2823] kthread+0x29d/0x330 [ 1763.698358][ T2823] ret_from_fork+0x1f/0x30 [ 1763.702841][ T2823] [ 1763.705317][ T2823] The buggy address belongs to the object at ffff8880593fa880 [ 1763.705317][ T2823] which belongs to the cache kmalloc-cg-64 of size 64 [ 1763.719682][ T2823] The buggy address is located 16 bytes inside of [ 1763.719682][ T2823] 64-byte region [ffff8880593fa880, ffff8880593fa8c0) [ 1763.732897][ T2823] [ 1763.735266][ T2823] The buggy address belongs to the physical page: [ 1763.741693][ T2823] page:ffffea000164fe80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x593fa [ 1763.751863][ T2823] memcg:ffff8880270ffe01 [ 1763.756119][ T2823] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1763.763791][ T2823] raw: 00fff00000000200 ffffea000076c400 dead000000000003 ffff888017442780 [ 1763.772415][ T2823] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880270ffe01 [ 1763.781645][ T2823] page dumped because: kasan: bad access detected [ 1763.788094][ T2823] page_owner tracks the page as allocated [ 1763.793843][ T2823] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4278, tgid 4278 (syz-executor), ts 79298389306, free_ts 26594260602 [ 1763.812222][ T2823] post_alloc_hook+0x173/0x1a0 [ 1763.817045][ T2823] get_page_from_freelist+0x206b/0x2180 [ 1763.822688][ T2823] __alloc_pages+0x1ec/0x4f0 [ 1763.827312][ T2823] alloc_slab_page+0x5d/0x180 [ 1763.832134][ T2823] new_slab+0x87/0x2d0 [ 1763.836232][ T2823] ___slab_alloc+0xbc5/0x1240 [ 1763.840979][ T2823] __kmem_cache_alloc_node+0x126/0x270 [ 1763.846518][ T2823] __kmalloc_node+0xa2/0x240 [ 1763.851162][ T2823] kvmalloc_node+0x6c/0x180 [ 1763.855700][ T2823] nf_hook_entries_grow+0x31a/0x760 [ 1763.860926][ T2823] __nf_register_net_hook+0x2c9/0x910 [ 1763.866336][ T2823] nf_register_net_hook+0xae/0x190 [ 1763.871479][ T2823] nf_register_net_hooks+0x40/0x1a0 [ 1763.876713][ T2823] brnf_device_event+0x12e/0x1d0 [ 1763.881850][ T2823] raw_notifier_call_chain+0xcb/0x160 [ 1763.887391][ T2823] register_netdevice+0x16a8/0x1b80 [ 1763.892853][ T2823] page last free stack trace: [ 1763.897652][ T2823] free_unref_page_prepare+0x8e5/0x9e0 [ 1763.903140][ T2823] free_unref_page+0x2e/0x3f0 [ 1763.907963][ T2823] free_contig_range+0x9d/0x150 [ 1763.912867][ T2823] destroy_args+0xef/0xa0e [ 1763.917482][ T2823] debug_vm_pgtable+0x33c/0x38e [ 1763.922356][ T2823] do_one_initcall+0x257/0x800 [ 1763.927147][ T2823] do_initcall_level+0x13d/0x1ed [ 1763.932186][ T2823] do_initcalls+0x4b/0x8a [ 1763.936588][ T2823] kernel_init_freeable+0x401/0x5ab [ 1763.941819][ T2823] kernel_init+0x19/0x1b0 [ 1763.946176][ T2823] ret_from_fork+0x1f/0x30 [ 1763.950641][ T2823] [ 1763.953007][ T2823] Memory state around the buggy address: [ 1763.958652][ T2823] ffff8880593fa780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1763.966937][ T2823] ffff8880593fa800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1763.975121][ T2823] >ffff8880593fa880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1763.983199][ T2823] ^ [ 1763.988594][ T2823] ffff8880593fa900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1763.996788][ T2823] ffff8880593fa980: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1764.005125][ T2823] ================================================================== [ 1764.013225][ T2823] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1764.020460][ T2823] CPU: 1 PID: 2823 Comm: syz.0.8366 Not tainted syzkaller #0 [ 1764.027865][ T2823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1764.038119][ T2823] Call Trace: [ 1764.041423][ T2823] [ 1764.044378][ T2823] dump_stack_lvl+0x188/0x24e [ 1764.049087][ T2823] ? memcpy+0x3c/0x60 [ 1764.053124][ T2823] ? show_regs_print_info+0x12/0x12 [ 1764.058502][ T2823] ? load_image+0x410/0x410 [ 1764.063058][ T2823] panic+0x2d3/0x710 [ 1764.067002][ T2823] ? bpf_jit_dump+0xd0/0xd0 [ 1764.071565][ T2823] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1764.077508][ T2823] ? _raw_spin_unlock+0x40/0x40 [ 1764.082423][ T2823] ? print_memory_metadata+0x314/0x400 [ 1764.088542][ T2823] check_panic_on_warn+0x80/0xa0 [ 1764.093867][ T2823] ? __bpf_get_stackid+0x6c9/0x920 [ 1764.099029][ T2823] end_report+0x66/0x110 [ 1764.103416][ T2823] kasan_report+0x118/0x140 [ 1764.107961][ T2823] ? __bpf_get_stackid+0x6c9/0x920 [ 1764.113122][ T2823] kasan_check_range+0x235/0x290 [ 1764.118093][ T2823] ? __bpf_get_stackid+0x6c9/0x920 [ 1764.123231][ T2823] memcpy+0x3c/0x60 [ 1764.127068][ T2823] __bpf_get_stackid+0x6c9/0x920 [ 1764.132042][ T2823] bpf_get_stackid_pe+0x33f/0x400 [ 1764.137126][ T2823] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1764.142625][ T2823] bpf_overflow_handler+0x6d1/0x790 [ 1764.147858][ T2823] ? bpf_overflow_handler+0xd9/0x790 [ 1764.153175][ T2823] ? perf_swevent_overflow+0x230/0x230 [ 1764.158660][ T2823] ? ct_irq_exit_irqson+0x113/0x170 [ 1764.163924][ T2823] ? mark_lock+0x94/0x320 [ 1764.168301][ T2823] ? __perf_event_account_interrupt+0x187/0x280 [ 1764.174675][ T2823] __perf_event_overflow+0x457/0x630 [ 1764.180021][ T2823] perf_swevent_event+0x315/0x570 [ 1764.185287][ T2823] ? perf_tp_event+0xc10/0xc10 [ 1764.190100][ T2823] ? ___perf_sw_event+0x44c/0x6d0 [ 1764.195265][ T2823] ___perf_sw_event+0x498/0x6d0 [ 1764.200271][ T2823] ? ___perf_sw_event+0x184/0x6d0 [ 1764.205458][ T2823] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1764.211950][ T2823] ? mark_lock+0x94/0x320 [ 1764.216519][ T2823] ? mark_lock+0x94/0x320 [ 1764.220893][ T2823] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1764.227116][ T2823] ? lock_chain_count+0x20/0x20 [ 1764.232093][ T2823] __perf_sw_event+0x135/0x260 [ 1764.236906][ T2823] do_user_addr_fault+0x497/0xb20 [ 1764.242141][ T2823] ? trace_hardirqs_off_finish+0x86/0x180 [ 1764.247891][ T2823] exc_page_fault+0x60/0x100 [ 1764.252507][ T2823] ? __might_fault+0xa6/0x120 [ 1764.257209][ T2823] asm_exc_page_fault+0x22/0x30 [ 1764.262091][ T2823] RIP: 0010:__get_user_4+0x1c/0x30 [ 1764.267296][ T2823] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 1764.287041][ T2823] RSP: 0018:ffffc900037bfd98 EFLAGS: 00050206 [ 1764.293138][ T2823] RAX: 000000110e22fff6 RBX: ffff8880787e54c0 RCX: 66a6f81726c89300 [ 1764.301227][ T2823] RDX: ffffffffffffffff RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 1764.309224][ T2823] RBP: ffffc900037bfed8 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 1764.317232][ T2823] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 00000000c004743e [ 1764.325234][ T2823] R13: ffff8880787e5598 R14: ffff888043a02a00 R15: 1ffff11008740575 [ 1764.333607][ T2823] ppp_ioctl+0x530/0x1a40 [ 1764.337997][ T2823] ? ppp_poll+0x250/0x250 [ 1764.342559][ T2823] ? __fget_files+0x28/0x460 [ 1764.347216][ T2823] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1764.352206][ T2823] ? security_file_ioctl+0x7c/0xa0 [ 1764.357384][ T2823] ? ppp_poll+0x250/0x250 [ 1764.361751][ T2823] __se_sys_ioctl+0xfa/0x170 [ 1764.366388][ T2823] do_syscall_64+0x4c/0xa0 [ 1764.370853][ T2823] ? clear_bhb_loop+0x60/0xb0 [ 1764.375601][ T2823] ? clear_bhb_loop+0x60/0xb0 [ 1764.380336][ T2823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1764.386286][ T2823] RIP: 0033:0x7f1269d9e0d9 [ 1764.390741][ T2823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.410484][ T2823] RSP: 002b:00007f1267ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.418952][ T2823] RAX: ffffffffffffffda RBX: 00007f126a025fa0 RCX: 00007f1269d9e0d9 [ 1764.427065][ T2823] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000e [ 1764.435169][ T2823] RBP: 00007f1269e35024 R08: 0000000000000000 R09: 0000000000000000 [ 1764.443259][ T2823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1764.451440][ T2823] R13: 00007f126a026038 R14: 00007f126a025fa0 R15: 00007ffc81dd5088 [ 1764.459447][ T2823] [ 1764.463077][ T2823] Kernel Offset: disabled [ 1764.467419][ T2823] Rebooting in 86400 seconds..